How do I setup my global http proxy

Question

I have upgraded my iPhone4 to iOS 6. I keep reading about the global http proxy yet I can&#x27;t find anywhere in the network settings to configure it.Can someone point me in the right direction as I think it will be quite handyThanks

liad · Answer

hi,the solution is here.https://developer.apple.com/library/ios/#featuredarticles/iPhoneConfigurationPro fileRef/RevisionHistory.html#//apple_ref/doc/uid/TP40010206-CH99-SW1the process is:1. create a profile and use specific keys for the proxy settings2. sign it - can be done by importing it into apple configurator (available on the mac app store)3. deploy it via email or using the configurator itself for supervised devices.sample configuration is below. it includes forcing a pass key and also a separate global admin password for profile removalit is also configured for automatic proxy pac configuration form a specific URL.&lt;?xml version&#x3D;"1.0" encoding&#x3D;"UTF-8"?&gt;&lt;!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"&gt;&lt;plist version&#x3D;"1.0"&gt;&lt;dict&gt;          &lt;key&gt;HasRemovalPasscode&lt;/key&gt;          &lt;true/&gt;          &lt;key&gt;PayloadContent&lt;/key&gt;          &lt;array&gt;                    &lt;dict&gt;                              &lt;key&gt;PayloadDescription&lt;/key&gt;                              &lt;string&gt;Global HTTP Proxy&lt;/string&gt;                              &lt;key&gt;PayloadIdentifier&lt;/key&gt;                              &lt;string&gt;com.apple.proxy.http.global.91572CEC-6F2D-4D56-A17F-111771716412&lt;/strin g&gt;                              &lt;key&gt;PayloadUUID&lt;/key&gt;                              &lt;string&gt;91572CEC-6F2D-4D56-A17F-111771716412&lt;/string&gt;                              &lt;key&gt;PayloadVersion&lt;/key&gt;                              &lt;real&gt;1&lt;/real&gt;                              &lt;key&gt;PayloadType&lt;/key&gt;                              &lt;string&gt;com.apple.proxy.http.global&lt;/string&gt;                              &lt;key&gt;ProxyPACURL&lt;/key&gt;                              &lt;string&gt;https://corpproxy.com/pac&lt;/string&gt;                              &lt;key&gt;ProxyType&lt;/key&gt;                              &lt;string&gt;Auto&lt;/string&gt;                    &lt;/dict&gt;                    &lt;dict&gt;                              &lt;key&gt;PayloadDescription&lt;/key&gt;                              &lt;string&gt;Configures passcode settings.&lt;/string&gt;                              &lt;key&gt;PayloadDisplayName&lt;/key&gt;                              &lt;string&gt;Passcode&lt;/string&gt;                              &lt;key&gt;PayloadIdentifier&lt;/key&gt;                              &lt;string&gt;com.apple.mobiledevice.passwordpolicy.A1D653A1-7AF7-447F-9C06-BBD890F3A 71B&lt;/string&gt;                              &lt;key&gt;PayloadType&lt;/key&gt;                              &lt;string&gt;com.apple.mobiledevice.passwordpolicy&lt;/string&gt;                              &lt;key&gt;PayloadUUID&lt;/key&gt;                              &lt;string&gt;A1D653A1-7AF7-447F-9C06-BBD890F3A71B&lt;/string&gt;                              &lt;key&gt;PayloadVersion&lt;/key&gt;                              &lt;integer&gt;1&lt;/integer&gt;                              &lt;key&gt;allowSimple&lt;/key&gt;                              &lt;true/&gt;                              &lt;key&gt;forcePIN&lt;/key&gt;                              &lt;true/&gt;                              &lt;key&gt;maxFailedAttempts&lt;/key&gt;                              &lt;integer&gt;10&lt;/integer&gt;                              &lt;key&gt;maxGracePeriod&lt;/key&gt;                              &lt;integer&gt;0&lt;/integer&gt;                              &lt;key&gt;minComplexChars&lt;/key&gt;                              &lt;integer&gt;0&lt;/integer&gt;                              &lt;key&gt;minLength&lt;/key&gt;                              &lt;integer&gt;0&lt;/integer&gt;                              &lt;key&gt;requireAlphanumeric&lt;/key&gt;                              &lt;false/&gt;                    &lt;/dict&gt;                    &lt;dict&gt;                              &lt;key&gt;PayloadDescription&lt;/key&gt;                              &lt;string&gt;Configures a password for profile removal&lt;/string&gt;                              &lt;key&gt;PayloadDisplayName&lt;/key&gt;                              &lt;string&gt;Profile Removal&lt;/string&gt;                              &lt;key&gt;PayloadIdentifier&lt;/key&gt;                              &lt;string&gt;com.apple.profileRemovalPassword.E0CE5E65-F7F2-4D2F-8F74-B169BE49EAB4&lt;/ string&gt;                              &lt;key&gt;PayloadType&lt;/key&gt;                              &lt;string&gt;com.apple.profileRemovalPassword&lt;/string&gt;                              &lt;key&gt;PayloadUUID&lt;/key&gt;                              &lt;string&gt;E0CE5E65-F7F2-4D2F-8F74-B169BE49EAB4&lt;/string&gt;                              &lt;key&gt;PayloadVersion&lt;/key&gt;                              &lt;real&gt;1&lt;/real&gt;                              &lt;key&gt;RemovalPassword&lt;/key&gt;                              &lt;string&gt;secret&lt;/string&gt;                    &lt;/dict&gt;          &lt;/array&gt;          &lt;key&gt;PayloadDisplayName&lt;/key&gt;          &lt;string&gt;Development Phone test&lt;/string&gt;          &lt;key&gt;PayloadIdentifier&lt;/key&gt;          &lt;string&gt;my.machine&lt;/string&gt;          &lt;key&gt;PayloadOrganization&lt;/key&gt;          &lt;string&gt;Liad Bokovsky&lt;/string&gt;          &lt;key&gt;PayloadRemovalDisallowed&lt;/key&gt;          &lt;true/&gt;          &lt;key&gt;PayloadType&lt;/key&gt;          &lt;string&gt;Configuration&lt;/string&gt;          &lt;key&gt;PayloadUUID&lt;/key&gt;          &lt;string&gt;A8860C59-BB90-49A6-99DF-2240766A1FD4&lt;/string&gt;          &lt;key&gt;PayloadVersion&lt;/key&gt;          &lt;integer&gt;1&lt;/integer&gt;&lt;/dict&gt;&lt;/plist&gt;

emmanuelajohnson · Answer

You may need to make network changes to support global proxy. When planning global proxy for your environment, consider the following options—and work with your filtering vendor for the configuration: (1) External accessibility (2) Proxy  PAC  (3)  ^^^Captive Wi-Fi Compatibility^^^ in iOS 7 or later ::  Using proxy with Caching Server :: Before iOS7, domain triggering rules were configured from arrays of domains: OnDemandMatchDomainAlwaysOnDemandMatchDomainonRetryOnDemandMatchDomianNeveriOS 7 or later still supports the OnRetry and Never cases, but favors of the EvaluateConnection action.

ronanfromrathmines · Answer

This payload can only be installed on a supervised device."Supervised" means that the device has been connected by USB tether at some point and configured using the Apple Configurator software.This is designed for enterprise or education environments where workers on shifts share the same iOS devices, which need to be wiped or reconfigured quickly.

ronanfromrathmines · Answer

Not necessarily correct in relation to the MDMs.  You won&#x27;t be able to set a device to "Supervised" using a cloud-based MDM like AirWatch.  You must connect the iOS device to Apple Configurator by USB in order to wipe it and make it Supervised.

reellifeproductions · Answer

I&#x27;ve been reading up on this and applying it.  As far as I have learned there is no way.  Supervised in this discussion is referring to "Supervised" mode in Apple Configurator.  So you have to connect the device to configurator, erase it, then apply the Supervision mode. Then when you reload the back up onto the device it will be capable of being filtered through and MDM. I tried it and it is working well.  Unfortunately I erased 20 other iPads I didn&#x27;t intend to erase. I hate Configurator as I have erased about 60 ipads without meaning to after working on Configurator. Good luck

dnevans · Answer

redwings14 If you copied the example above you will have to correct the error on line 15 which has a space in the word string:&lt;string&gt;com.apple.proxy.http.global.91572CEC-6F2D-4D56-A17F-111771716412&lt;/strin g&gt;

liad · Answer

Hi,I am using an MDM created internally using profiles and certificates as per apple documentation.Since we are in a controlled release phase, i can not confirm whether i can create a new profile and sign it using the MDM cert.from what I read, it should work and therefore I do not think it is required to use a thethered device or apple MDM .liad

dnevans · Answer

liad, I was looking at your post and was wondering if you could provide further detail? I already have a base configuration profile created via iPCU. All I want to do is create another configuration profile for the Global HTTP Payload. I thought the easiest way to do this is to create a new configuration profile via iPCU with just the mandatory "General" payload; and then edit the .mobileconfig file via a text editor to add the Global HTTP Proxy payload.In your instructions below you mention in step 1 to "create a profile and use specific keys for the proxy settings". How do I use specific keys for the proxy settings? Do I need to grab the PayloadUUID from another configuration profile that contains proxy settings e.g. the Wi-Fi payload?

liad · Answer

Hi,generally speaking, yes, you need a UUID.I use a build in function in Mac OS X called uuidgen.$ uuidgen A7C3BD0C-1A5C-42EE-997F-5B946560F5F6it always creates a new random uuid.let me know if you need more information about the profile - i think i got it (mostly) figured out ;-)Liad

sheronz18 · Answer

Hi,Did you find a way to deploy Global Proxy payload without using Apple configurator? (applying this payload without needing to physically connect the device to a computer..)Is it possible to apply it only using MDM ?Thanks

jeffreykusters · Answer

I am also having trouble adding the Global HTTP Proxy payload. When I add the required keys and strings the iPCU gives me the following error:An error occurred attempting to open configuration fileHelp is appreciated!Thanks

sberman · Answer

Go to Settings &gt; Network.  Click on the blue arrow to the right of the network in question.  Click on the BootP tab.  HTTP Proxy is at the bottom.

liad · Answer

I think you completely missed the question...This is regarding a GLOBAL http proxy, not a network specific.I&#x27;ve been looking for the answer to this question myself but so far without any success.

liad · Answer

Correct.The Global HTTP proxy requires supervised phone and therefore a MDM ( apple configurator), must be used.

liad · Answer

i think it might be enough to have a MDM certificate / profile in order to qualify for being "Supervised" but i&#x27;ve yet to confirm it.