Android anti-phishing using Tunnel app

Once you have Advanced phishing protection for managed devices for Android devices (hyperlink - yet to be added) through the Ivanti Mobile Threat Defense V5 threat management console, you will need to provision Android clients with the Ivanti Tunnel app, to provide a VPN pathway.

Enable the "Use Tunnel for Anti-phishing Only" option for all Android Enterprise (AE) clients for additional app configuration. This permits anti-phishing for end users who are not using other Tunnel capabilities.

Before you begin 

Complete the following task before you begin: Enabling additional MTD anti-phishing protection

Deploying Tunnel app to Android and Android Enterprise devices

Procedure 

  1. In the Ivanti Neurons for MDM portal, go to Apps > App Catalog.

  2. Find the app in the Google Play Store.

  3. Click the app entry.

  4. Accept permissions on behalf of Android Enterprise users.

  5. Click Next.

  6. Select a Distribution option.

  7. Select the App Configurations.

  8. Use the following guidelines to complete the options:

    Setting Description
    Install on Device

    Select this option to start installation immediately after registration. The user will be prompted to confirm installation of the app except when the device is a Samsung Knox device, and the silent installation option below has been selected.
    Do not show app in end user App Catalog Select this option if you do not want the user to see the app in the app catalog on the device.
    Silently install on Samsung Knox devices Select this option if you do not want the user prompted to confirm installation on Samsung Knox devices.
    Set App Install Priority

    For Android Enterprise apps you can prioritize downloading of specific apps before other apps. For example, you can prioritize the download of Tunnel and Email apps before other noncritical apps. The following are the available priority level options:

    • High: This setting is for critical or high-priority apps.

    • Medium: (selected by default)

    • Low: This setting is applicable for In-House, Public, Private and Web apps. The in-house apps are installed via the client and the public and private are installed via Google. The app priority is applied only to those apps that are installed via the same channel.

    Install only when connected to Wi-Fi Select this option to install the app only when the device is connected to the Wi- Fi.
    Install only when charging Select this option to install the app only when the charging of the device is in progress.
    Install only when idle Select this option to install the app only when the device is in idle (not actively used by the user).

  9. Select a Distribution option.

  10. Click Save.