Android anti-phishing using Tunnel app

Once you have Advanced phishing protection for managed devices for Android devices through the MTD threat management console, you will need to provision Android clients with the Tunnel app, to provide a VPN pathway. See Deploying Tunnel app to Android and Android Enterprise devices.

Android Enterprise (AE) clients need an additional app configuration with "Use Tunnel for Anti-phishing Only" option enabled. This permits anti-phishing for end users not using other Tunnel capabilities. See Creating an Ivanti Tunnel app configuration for AE devices.

Before you begin

Complete the following task before you begin:

Advanced phishing protection for managed devices

Deploying Tunnel app to Android and Android Enterprise devices

Procedure

In the Ivanti Neurons for MDM portal, go to Apps >App Catalog.
Find the app in the Google Play Store.
Click the app entry.
Accept permissions on behalf of Android Enterprise users.
Click Next.
Select a distribution option.
Expand Advanced Options & App Configuration.

Use the following guidelines to complete the options:

**Table 16.** Available app settings
Setting	Description
Install on Device	Select this option to start installation immediately after registration. The user will be prompted to confirm installation of the app except when the device is a Samsung Knox device and the silent installation option below has been selected.
Do not show app in end user App Catalog	Select this option if you do not want the user to see the app in the app catalog on the device.
Silently install on Samsung Knox devices	Select this option if you do not want the user prompted to confirm installation on Samsung Knox devices.
Set App Install Priority	For Android Enterprise apps you can prioritize downloading of specific apps before other apps. For example, you can prioritize the download of Tunnel and Email apps before other noncritical apps. The following are the available priority level options: High This setting is for critical or high-priority apps. Medium (selected by default) Low This setting is applicable for In-House, Public, Private and Web apps. The in-house apps are installed via the client and the public and private are installed via Google. The app priority is applied only to those apps that are installed via the same channel.
Install only when connected to Wi-Fi	Select this option to install the app only when the device is connected to the Wi- Fi.
Install only when charging	Select this option to install the app only when the charging of the device is in progress.
Install only when idle	Select this option to install the app only when the device is in idle (not actively used by the user).

Click Next.
Select a promotion option.
Click Done.

Next steps

To complete Android anti-phishing for Android Enterprise clients, continue to Creating an Ivanti Tunnel app configuration for AE devices.