Hardware reference guide
90 GlobalProtect Administrator’s Guide
Define Deployment Policies Set Up the GlobalProtect Mobile Security Manager
Configuration Profiles—Contain the configuration settings, restrictions, and web clips to be pushed to
managed devices upon check-in. You must create separate configuration profiles for iOS and Android
devices due to differences in OS functionality. For details on creating the profiles, see Create an Android
Configuration Profile and Create an iOS Configuration Profile. You can also use the iOS configuration
profile to automate the process of configuring mobile devices to connect to the GlobalProtect VPN. See
Define a GlobalProtect VPN Configuration for specific instructions on this configuration.
iOS Provisioning Profiles—To enable iOS users to launch internally-developed enterprise apps you must
deploy a provisioning profile. You can create configurations that allow you to automatically deploy
provisioning profiles to devices as described in Import an iOS Provisioning Profile.
SCEP Configurations—Configurations that allow iOS devices to use the simple certificate enrollment
protocol (SCEP) to obtain certificates from a SCEP-enabled CA, such as the Microsoft SCEP Server. SCEP
can be used to issue the identity certificates that the Mobile Security Manager requires, or it can be used to
issue certificates for other services required on the device. For details, see Set Up a SCEP Configuration.
After you create the configuration profiles you need for the devices the Mobile Security Manager manages, you
must create the deployment policies to ensure that the configurations get pushed to the proper devices. See
Create Deployment Policies for details.
Import Web Clip Icons
Web clips provide shortcuts to web sites or web-based applications. When the user taps a web clip icon, it
automatically opens the associated URL. The Mobile Security Manager can automatically deploy web clips to
managed devices to provide shortcuts that provide users with quick access to internal systems, such as internal
bug tracking databases, the Intranet, or HR systems. If you plan to include web clips in the configurations you
deploy, you may want to create associated icons to display on the home screen.
You must import the web clip icons onto the Mobile Security Manager as follows before creating configuration
profiles that include web clips. If you do not associate an icon with a web clip, a white square will display instead.