Guides
ProductDeveloperPartnerPersonal
Guides
ProductDeveloperPartnerPersonal

MobileIron Registration

By downloading an XML file from Umbrella, optionally updating it, and then pasting its contents into your MobileIron system, MobileIron is able to push configuration information to both the Cisco Security Connector (CSC) and Umbrella so that your iOS device is registered with Umbrella. The result is that your iOS device is protected by Umbrella.

For information about configuring your specific Mobile Device Management (MDM) system, see your MDM system’s documentation.

👍

Umbrella supports MobileIron Enterprise Mobility Management (EMM) On-Prem and Cloud versions 9.4 or higher.

Table of Contents

Anonymization

Umbrella provides you with the option of anonymizing mobile devices for reporting and administration purposes. When you anonymize a mobile device, its label is hidden and replaced by your device's serial number. The label name is anonymized in both the Umbrella dashboard and in the CSC app UI. For information about how to anonymize your device, see Anonymize Devices.

Prerequisites

  • The Cisco Security Connector requirements.
  • MobileIron EMM On-Prem and Cloud versions 9.4 or higher.
  • You must first configure your MobileIron MDM system. Configure your MobileIron system as required so that it is able to push configuration information to both CSC and Umbrella. For information about configuring MobileIron, see MobileIron documentation. For more information about adding the CSC to your MobileIron MDM, see MobileIron Configuration and MobileIron documentation. For support, contact MobileIron support.

Procedure

Note: You must log into your Umbrella dashboard as an administrator.

Step 1: Add an Organization Administrator’s Email Address

The administrator email address is the email address that your end-user can use to send diagnostic reports from the app by clicking the I (vertical line) icon from within the iOS device. These reports can then be passed onto Cisco support. Once set, this email address is automatically added when managing an MDM.

  1. Navigate to Deployments > Core Identities > Mobile Devices and click Settings.
948
  1. In Mobile Device Settings, add an email address, select operation mode (fail open or fail closed), select a notifications level (Protection failure notifications only or notify on all state changes), choose a device identification method, and click Save.
404

Step 2: Add a Mobile Device

  1. In Umbrella, navigate to Deployments > Core Identities > Mobile Devices and click Manage MDMs.
948
  1. Under Deployment Type, click the Managed by MDM radio button, and then click Next.
999
  1. In the Managed Mobile Clients modal, click iOS.
634
  1. Click MobileIron Config.
634
  1. In the opened dialog, click Download.
    This email address is where diagnostic reports are sent when a user clicks the I (vertical line) icon from within the iOS device. Once set, this email address is automatically added when managing an MDM.
577
  1. Copy the contents of the downloaded XML file and paste or upload it into your MDM profile (Policies & Configs > Configurations > iOS and MacOS > iOS Only). For information about configuring the MobileIron system, see MobileIron documentation.
    Note: For MobileIron cloud, "$DEVICE_SN$ may need to be replaced with "${deviceSN}".

If successful, your mobile device registers with Umbrella and is listed at Deployments > Core Identities > Mobile Devices. CSC on your mobile device updates to connect to Umbrella so that your iOS device is protected by Umbrella.

1399

If you have anonymized your device, see Anonymize Devices. Umbrella hides the device's true label name by replacing it with the device's serial number. Existing active devices anonymize with 24 hours. New devices anonymize immediately.

910

As no changes can be made in Umbrella to the actual provisioned device, these mobile devices are simply listed in Umbrella as identities; however, you can now use Umbrella to apply policies to these mobile device identities. For more information, see Apply Umbrella Policies.

Verify Umbrella on Your iOS device

  1. In the CSC app, tap the Status icon and confirm that it shows Protected by Umbrella.
  2. For protection details, tap Protected by Umbrella.
737

Install Umbrella Root Certificate

The intelligent proxy can inspect web traffic sent from a mobile device to Umbrella. If you enable the intelligent proxy with SSL decryption in your DNS policy and apply the policy to your mobile device, you must install the Umbrella Root Certificate Authority (CA) certificate on the mobile device. Download the Umbrella Root CA certificate from the DNS policy or from Deployments > Configuration > Root Certificate.

Jamf Registration < MobileIron Registration > MobileIron Configuration

Updated 12 months ago