How to setup a global proxy in Android, iOS and Windows?

Satish Shetty Updated by Satish Shetty

Using the Codeproof UEM platform, The MDM/EMM Administrator can centrally configure a global proxy on all the Android, iOS and Windows devices. No device rooting is required. The global proxy primarily helps in web content filtering. Using a global proxy configurations, all the apps web access (http and https) cab be redirected to a proxy server where contents can be monitored centrally.

1. Global Proxy Policy for Android (Android Enterprise/AFW enabled devices)

Steps:

  1. Login to Admin Cloud Console here
  2. Go to Policy Manager from the top menu
  3. Select a device or a group of devices ( such as "Android Devices")
  4. On the right side, select "Android Security" and then select "Networking" tab
  5. Enter the PAC proxy url or enter the manual proxy proxy server name or IP address and the port number.
  6. Hit "Save" button below to save the settings
  7. Now all the devices in the "Android Devices" group will connect the specified proxy server
  8. See below image illustrations.

 

android-enterprise

 

 

2. Global Proxy Configuration for iOS Devices.

All the supervised iOS devices that are managed via Codeproof can be configured for global proxy. See below.

3. Global Proxy Configuration for Windows 10 Devices.

The Codeproof UEM platform supports configuring a global system wide proxy for Windows 10 desktop and Laptop PCs. Both PAC proxy and the manual proxy configurations are supported. See below.

4. Global Proxy Policy for Samsung and LG (Using OEM specific Codeproof MDM):

Using global proxy policy, all the HTTP and HTTPS traffic can be redirected to a port on a proxy server. Normally global proxy is used by pre-loaded browsers, but may not be used by other custom applications. Applications that need to open a http/https connection must check and use this given proxy configuration.

Proxy configurations are simple. Administrator can remotely set the configurations such as Proxy Server Address, Port and Proxy exclusion address list at the group level once. Then all the devices will use proxy server for the network communications no matter what WiFi or cellular network they use. See below image illustration.

Proxy Server: IP Address of a transparent HTTP proxy server

Proxy Port: Port number of a transparent HTTP proxy server

Proxy exclusions: Hostname or Ip address that will not use global proxy server configuration . For example, To exclude www.codeproof.com and blog.codeproof.com, you can use exclusion filter *.codeproof.com

 

IpTables Proxy Policy:

IpTables proxy configuration policy enables transparent HTTP proxy using port 80 redirection. All the traffic originally targeted to port 80 will be redirected to this proxy server.

IpTables Proxy Server: IP Address of a transparent HTTP proxy server

IpTables Proxy Port: Port number of a transparent HTTP proxy server

IpTables proxy exclusions: An administrator can add redirect exception rules on iptables. Redirect exception rules take precedence over proxy rules and reroute rules

"1.2.3.4:80" (Redirect exception to IP 1.2.3.4 on port 80)

"1.1.1.1:*" (Redirect exception to IP 1.1.1.1 on all ports)

"1.2.3.4-1.2.3.100:80" (Redirect exception for IP range 1.2.3.4-1.2.3.100 on port 80)

See below the policy configuration UI in the console.

 

Steps:

  1. Login to Admin Cloud Console here
  2. Go to Policy Manager from the top menu
  3. Select a device or a group of devices ( such as "Samsung Devices")
  4. On the right side, select "Samsung Security" and then select "Networking" tab
  5. Enter the proxy server name or IP address.
  6. Enter the proxy server port number
  7. Enter the proxy exclusion server if any
  8. Hit "Save" button below to save the settings
  9. Now all the devices in the "Samsung Devices" group will connect the specified proxy server
  10. See below image illustrations.

 

proxy-iptables

 

 

 

How did we do?

Android Oreo global proxy requirements

Contact