Manual Part 2

Wireless Array
382 Configuring the Wireless Array
AirWatch attempts to connect to the Array, the device displays a page
directing the user to install the AirWatch agent and go to the AirWatch
enrollment page. Note that Android devices will need another form of
network access (i.e. cellular) to download the agent, since un-enrolled
devices will not have access to download it via the Array. See “User
Procedure for Wireless Access” on page 382 for more details.
9. You must configure the Mobile Device Management setting on one or
more SSIDs to use AirWatch, as described in Procedure for Managing
SSIDs (see Step 16 on page 267).
User Procedure for Wireless Access
1. A user attempts to connect a mobile device to an SSID that uses AirWatch.
2. The device will authenticate according to the SSID’s authentication
settings (Open, Radius MAC, 802.1x).
3. The user browses to any destination on the Internet.
The Array asks the user to wait while it checks device enrollment and
compliance status by querying the AirWatch API with the device MAC
address.
4. If AirWatch responds that the device is enrolled and compliant, the
device will be allowed into the network. The device will be considered
compliant if AirWatch finds that the device does not violate any
applicable policies for that device. (If no policies are assigned to the
device in AirWatch, then the device is compliant by default.)
5. If the device is not enrolled, all user traffic will be blocked, except that
HTTP traffic is redirected to an intermediate page on the Array that tells
the user to download and install the AirWatch agent. The page displays a
link to the AirWatch-provided device enrollment URL. This link is a pass-

Device enrollment and compliance status will be checked via polling so there
may be a delay before the device will be allowed in. That delay will depend on
the API Polling Period setting.