How do I setup my global http proxy

• You may need to make network changes to support global proxy. When planning global proxy for your environment, consider the following options—and work with your filtering vendor for the configuration: (1) External accessibility (2) Proxy PAC (3) ^^^Captive Wi-Fi Compatibility^^^ in iOS 7 or later :: Using proxy with Caching Server :: Before iOS7, domain triggering rules were configured from arrays of domains:
• OnDemandMatchDomainAlways
• OnDemandMatchDomainonRetry
• OnDemandMatchDomianNever

iOS 7 or later still supports the OnRetry and Never cases, but favors of the EvaluateConnection action.

Go to Settings > Network. Click on the blue arrow to the right of the network in question. Click on the BootP tab. HTTP Proxy is at the bottom.

I think you completely missed the question...

This is regarding a GLOBAL http proxy, not a network specific.

I've been looking for the answer to this question myself but so far without any success.

hi,

the solution is here.

https://developer.apple.com/library/ios/#featuredarticles/iPhoneConfigurationPro fileRef/RevisionHistory.html#//apple_ref/doc/uid/TP40010206-CH99-SW1

the process is:

1. create a profile and use specific keys for the proxy settings

2. sign it - can be done by importing it into apple configurator (available on the mac app store)

3. deploy it via email or using the configurator itself for supervised devices.

sample configuration is below. it includes forcing a pass key and also a separate global admin password for profile removal

it is also configured for automatic proxy pac configuration form a specific URL.

<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<plist version="1.0">

<dict>

<key>HasRemovalPasscode</key>

<true/>

<key>PayloadContent</key>

<array>

<dict>

<key>PayloadDescription</key>

<string>Global HTTP Proxy</string>

<key>PayloadIdentifier</key>

<string>com.apple.proxy.http.global.91572CEC-6F2D-4D56-A17F-111771716412</strin g>

<key>PayloadUUID</key>

<string>91572CEC-6F2D-4D56-A17F-111771716412</string>

<key>PayloadVersion</key>

<real>1</real>

<key>PayloadType</key>

<string>com.apple.proxy.http.global</string>

<key>ProxyPACURL</key>

<string>https://corpproxy.com/pac</string>

<key>ProxyType</key>

<string>Auto</string>

</dict>

<dict>

<key>PayloadDescription</key>

<string>Configures passcode settings.</string>

<key>PayloadDisplayName</key>

<string>Passcode</string>

<key>PayloadIdentifier</key>

<string>com.apple.mobiledevice.passwordpolicy.A1D653A1-7AF7-447F-9C06-BBD890F3A 71B</string>

<key>PayloadType</key>

<string>com.apple.mobiledevice.passwordpolicy</string>

<key>PayloadUUID</key>

<string>A1D653A1-7AF7-447F-9C06-BBD890F3A71B</string>

<key>PayloadVersion</key>

<integer>1</integer>

<key>allowSimple</key>

<true/>

<key>forcePIN</key>

<true/>

<key>maxFailedAttempts</key>

<integer>10</integer>

<key>maxGracePeriod</key>

<integer>0</integer>

<key>minComplexChars</key>

<integer>0</integer>

<key>minLength</key>

<integer>0</integer>

<key>requireAlphanumeric</key>

<false/>

</dict>

<dict>

<key>PayloadDescription</key>

<string>Configures a password for profile removal</string>

<key>PayloadDisplayName</key>

<string>Profile Removal</string>

<key>PayloadIdentifier</key>

<string>com.apple.profileRemovalPassword.E0CE5E65-F7F2-4D2F-8F74-B169BE49EAB4</ string>

<key>PayloadType</key>

<string>com.apple.profileRemovalPassword</string>

<key>PayloadUUID</key>

<string>E0CE5E65-F7F2-4D2F-8F74-B169BE49EAB4</string>

<key>PayloadVersion</key>

<real>1</real>

<key>RemovalPassword</key>

<string>secret</string>

</dict>

</array>

<key>PayloadDisplayName</key>

<string>Development Phone test</string>

<key>PayloadIdentifier</key>

<string>my.machine</string>

<key>PayloadOrganization</key>

<string>Liad Bokovsky</string>

<key>PayloadRemovalDisallowed</key>

<true/>

<key>PayloadType</key>

<string>Configuration</string>

<key>PayloadUUID</key>

<string>A8860C59-BB90-49A6-99DF-2240766A1FD4</string>

<key>PayloadVersion</key>

<integer>1</integer>

</dict>

</plist>

This payload can only be installed on a supervised device.

"Supervised" means that the device has been connected by USB tether at some point and configured using the Apple Configurator software.

This is designed for enterprise or education environments where workers on shifts share the same iOS devices, which need to be wiped or reconfigured quickly.

Correct.

The Global HTTP proxy requires supervised phone and therefore a MDM ( apple configurator), must be used.

Not necessarily correct in relation to the MDMs.

You won't be able to set a device to "Supervised" using a cloud-based MDM like AirWatch.

You must connect the iOS device to Apple Configurator by USB in order to wipe it and make it Supervised.

i think it might be enough to have a MDM certificate / profile in order to qualify for being "Supervised" but i've yet to confirm it.

Is there a way to enable to GlobalProxy on a non-supervised device ?

How do I use this in apple's config? I've exported a profile and tried editing it with xcode but when I go to try and import it, it says it's corrupt. any thoughts?

I've been reading up on this and applying it. As far as I have learned there is no way. Supervised in this discussion is referring to "Supervised" mode in Apple Configurator. So you have to connect the device to configurator, erase it, then apply the Supervision mode. Then when you reload the back up onto the device it will be capable of being filtered through and MDM. I tried it and it is working well. Unfortunately I erased 20 other iPads I didn't intend to erase. I hate Configurator as I have erased about 60 ipads without meaning to after working on Configurator. Good luck

You have to go to Apple Configurator and erase the device, then put it in Supervise mode. Then you reload the back up and enroll it in your MDM where you can set the global proxy.

Assuming that you aren't using apple config for mdm, correct? You need to do it through 3rd party mdm?

redwings14 If you copied the example above you will have to correct the error on line 15 which has a space in the word string:

<string>com.apple.proxy.http.global.91572CEC-6F2D-4D56-A17F-111771716412</strin g>

Hi,

I am using an MDM created internally using profiles and certificates as per apple documentation.

Since we are in a controlled release phase, i can not confirm whether i can create a new profile and sign it using the MDM cert.

from what I read, it should work and therefore I do not think it is required to use a thethered device or apple MDM .

liad