Lookout - Phishing and Content Protection Automatic Activation
First of all, if you read this, you have already subscribe to Lookout or you will do it shortly. That means you are a smart one !
If you have activated Phishing and Content Protection (PCP) with Lookout you may have noticed several things, when you deploy the Lookout For Work application on your fleet there are some manual steps to achieve on the end-user devices.
What are those steps :
- Launch Lookout For Work application on the mobile device
- Allow a local VPN profile to be installed
At the same time, if you haven't changed the default settings on the Lookout console, all administrators will receive an automatic alert until the end-user allow the VPN setup on the device. A behaviour that we usually want to avoid.
Everything you ask on the end-user side is often boring or difficult for them, every manual action on a device is subject to mistakes and every non-wanted alert for admin or end-user is not usefull.
Good news readers, we can activate PCP automaticly by using your EMM capabilities !
You can find bellow, how to do it with Workspace One UEM for iOS and Android.
On iOS
- Log-in on your Workspace One UEM Console
- Go to Devices / Profiles & Ressources / Profiles and click on ADD then ADD Profile and choose iOS / Device Profile
Type all the general needed informations as profile name, smartgroup and so on...
- Then choose the VPN payload
In the Connection Info part :
Type a Connection Name
Choose Custom in Connection Type
Identifier : com.lookout.work
Server : vpn.mdm.safebrowsing.lookout.com
Account : {EmailAddress}
Custom Data : Key = NOTIFICATIONS_PREGRANTED Value=True
In the Authentication part
User Authentication : Certificate
You can now save and publish your profile.
On Android
The screenshot bellow may change depending on the Workspace One UEM version.
- Log-in on your Workspace One UEM Console
- Go to Devices / Profiles & Ressources / Profiles and click on ADD then ADD Profile and choose Android
Type all the general needed informations as profile name, smartgroup and so on...
- Then choose the Custom payload
Copy/Paste this :
<characteristic uuid="l00k0ut1-5cf7-4fc1-a757-742f3df81a1b" type="com.airwatch.android.androidwork.app:com.lookout.enterprise" target="1"><parm name="profilename" value="VPN Configuration" type="string" /><parm name="action" value="1" type="string" /><parm name="EnableAlwaysOnVPN" value="True" type="boolean" /><parm name="awvpnuuid" value="leek0ut4-ae9e-4caa-94e3-1b5c32655ced" type="string" /><parm name="vpnconnectionsetactive" value="True" type="boolean" /></characteristic>
You can save and publish your profile.
Now everything regarding PCP needs for Lookout is configured on your mobile device, this is automatic and seamless for the end-users and admins.
I hope this tips will help you and your end-users and your life are smootest now.
Stay Tuned !
