Hardware reference guide

92 GlobalProtect Administrator’s Guide
Define Deployment Policies Set Up the GlobalProtect Mobile Security Manager
Step 2 Enter identifying information for the
configuration.
1. On the General tab, enter a Name to display for the
configuration in the Mobile Security Manager web interface.
2. Enter a
Display Name to show on the Detail/Profiles screen on
the mobile device as well as on the device HIP report.
3. Enter an
Identifier for the configuration in reverse-DNS style
format. For example, if this profile will be used to push a base
iOS configuration to devices, you might name the configuration
something like
com.acme.iosprofile.
4. (Optional) Enter a
Description to display on the Detail screen
of the mobile device.
Step 3 (Optional) Define how the profile can be
modified.
1. By default, the user can remove a configuration profile from the
device. To prevent users from removing this configuration,
select
Never from the User Can Remove Profile drop-down.
To require a password for removal, select
With Authorization
and then set the
Authorization Password.
2. (iOS 6.0 and later) By default, the profile will not get removed
automatically. However, you can select a value from the
Automatically Remove Profile drop-down to have the profile
automatically removed after a specified number of days or on a
specific date.
Step 4 Specify passcode requirements for the
devices.
If you specify passcode requirements, the
device users will be forced to adhere to
the passcode settings you define.
1. If you want to force device users receiving this configuration to
use a passcode on the device, select the
Passcode tab and then
select the
Passcode check box to enable the restriction. Simply
enabling this field will force use of a passcode with a minimum
of 4 characters, without imposing any additional requirements.
2. (Optional) Specify any additional passcode requirements to
enforce, such as length or complexity requirements, the
frequency at which the user must change the passcode, or
whether to force the device to automatically lock after a
specified number of minutes.
Step 5 Set restrictions on what the user can do
with the device.
1. Select the
Restrictions tab and then select the Restrictions
check box to enable the configuration control what the user can
do with the mobile device.
2. Select or clear check boxes on the
Device Functionality,
Applications, iCloud, Security and Privacy, and/or Content
Ratings
tabs to define the desired device restrictions. For
example, if you don’t want users to be able to use the camera,
clear the
Allow use of camera check box.
Create an iOS Configuration Profile (Continued)