bbyyoodd ssuuiitteehelp.kaseya.com/webhelp/en/byod/r8/en_byodguide_r8.pdf · quick start 3 browsers...

September 19, 2014

Kaseya 2

BBYYOODD SSuuiittee

User Guide

Version R8

Agreement

The purchase and use of all Software and Services is subject to the Agreement as defined in Kaseya’s “Click-Accept” EULATOS as updated from time to time by Kaseya at http://www.kaseya.com/legal.aspx. If Customer does not agree with the Agreement, please do not install, use or purchase any Software and Services from Kaseya as continued use of the Software or Services indicates Customer’s acceptance of the Agreement.”

©2014 Kaseya. All rights reserved. | www.kaseya.com

http://www.kaseya.com/jp/legal.aspx

http://www.kaseya.com/

i

Contents

Overview ....................................................................................................................................................... 1

BYOD Suite Module Requirements ............................................................................................................ 2

Quick Start ................................................................................................................................................... 3

BYOD gateway Installation ......................................................................................................................... 4

1. Welcome ........................................................................................................................................... 4

2. License Agreement .......................................................................................................................... 5

3. Install Location ................................................................................................................................ 5

4. Successful Installation .................................................................................................................... 6

Verify the Service is Running ..................................................................................................... 7

Relay Connection Test ................................................................................................................ 8

5. BYOD Gateway Startup ................................................................................................................... 8

6. Register Your Gateway ................................................................................................................... 9

7. Activate Your Gateway .................................................................................................................. 10

8. Get Started Using Your BYOD gateway ...................................................................................... 11

9. BYOD gateway Control Panel ....................................................................................................... 11

10. Installing Secure Browser .......................................................................................................... 12

BYOD gateway Configuration .................................................................................................................. 13

Control Panel - Logon ....................................................................................................................... 13

Control Panel - Tabs .......................................................................................................................... 14

Control Panel - Home tab .................................................................................................................. 14

Control Panel - Site tab ..................................................................................................................... 15

Add item to this menu... ............................................................................................................ 16

The contents of a file ................................................................................................................. 17

Files and subfolders in a folder or network share ................................................................. 18

A submenu ................................................................................................................................. 20

Non-proxied link to an external Web site ................................................................................ 20

Intranet Tunnel access to company Web resources .............................................................. 20

Static Web content from a directory ........................................................................................ 21

Control Panel - Mail tab ..................................................................................................................... 22

Control Panel - Documents tab ........................................................................................................ 23

Control Panel - Users tab .................................................................................................................. 24

Add a new user .......................................................................................................................... 25

Testing Window Domain User Accounts................................................................................. 26

Auto Discover Windows User Accounts ................................................................................. 27

Control Panel - Network tab ............................................................................................................. 28

Control Panel - Devices tab .............................................................................................................. 30

Control Panel - Policies tab .............................................................................................................. 31

Control Panel - Help tab .................................................................................................................... 32

Control Panel - About tab ................................................................................................................. 32

ii

Customizing Secure Browser Startup ............................................................................................. 33

Customizing the Site Icon ................................................................................................................. 34

Secure Browser ......................................................................................................................................... 35

Download Secure Browser ............................................................................................................... 35

Add BYOD gateway to Your Site List .............................................................................................. 36

Delete BYOD gateway from Your Site List ...................................................................................... 38

Add Passcode to Secure Browser ................................................................................................... 38

Contact Gateway Administrator for Support .................................................................................. 39

Save Files to Secure Docs ................................................................................................................ 39

Full Screen Mode on IOS Devices .................................................................................................... 41

Secure Docs ............................................................................................................................................... 42

Download Secure Docs ..................................................................................................................... 42

Add BYOD gateway to Your Site List .............................................................................................. 42

Delete BYOD gateway from Your Site List ...................................................................................... 43

Add Passcode to Secure Docs ......................................................................................................... 43

Sites List ............................................................................................................................................. 43

Document Sources ............................................................................................................................ 44

Edit Files ............................................................................................................................................. 44

Move, Copy, and Delete Files ........................................................................................................... 44

Secure Storage .................................................................................................................................. 45

Favorites ............................................................................................................................................. 45

Secure Mail ................................................................................................................................................. 47

Download Secure Mail ....................................................................................................................... 47

Secure Mail Configuration ................................................................................................................ 47

Attach a Document from Secure Docs ............................................................................................ 48

Save a Mail Attachment to Secure Docs ......................................................................................... 51

Glossary ..................................................................................................................................................... 53

Data Directory .................................................................................................................................... 53

Exchange ActiveSync ....................................................................................................................... 54

Proxied and Non-proxied Links ....................................................................................................... 54

Verify Relay Service .......................................................................................................................... 54

Index ........................................................................................................................................................... 57

Overview

1

Overview BYOD Suite—Go Mobile, Stay Informed

BYOD Suite provides mobile users safe BYOD access to applications, email, and documents. Mobile users don't have to switch between carrying a company-owned mobile device, or their own mobile device. Either way BYOD Suite cleanly isolates enterprise assets from personal data.

Rover manages information using secure "container apps" each featuring full user authentication, policy enforcement, and tight encryption. The enterprise network is safe from user-downloaded apps,

as only these secure container apps can reach back to the enterprise network—and even then on a tight

leash, with access limited to intranet resources in a gateway-specified white list.

Even hard-to-get information housed in your company’s proprietary databases, ERP systems, CRM, or financial software can easily be retrieved and delivered in practical smartphone-friendly formats.

BYOD Suite is available on both the iPhone and iPad and also on Android devices!

Simple to set up and use...

BYOD Suite

For each mobile user, BYOD Suite comprises three secure "container apps" downloaded and installed by the user:

Secure Browser -a secure browser for app and file access.

Secure Docs - a secure app for document viewing and editing.

Secure Mail - a secure app for email and personal information management (PIM).

Once any of the container apps are installed the user enters an administrator-provided credential. That's all the user has to do to gain secure access to their company information, all of it encrypted and isolated from any other part of their mobile device.

BYOD gateway

Administrators manage mobile user access to BYOD Suite data by installing a BYOD gateway on their corporate network. BYOD gateway installation requires no change to the company's firewall model and provides highly resilient mobile access, enabling users to get their data as fast and reliably as possible.

Easy and Flexible Deployment

Use the BYOD gateway Control Panel (page 14) to extend secure BYOD access to apps, email, and documents within minutes.

Extend only the access each mobile user needs.

No VPN required—communications can occur over a private application network.

BYOD Suite Module Requirements

2

Thorough Security

All information is encrypted in flight and at rest

Mobile devices do not attach to enterprise network

Unauthorized users cannot gain access with lost/stolen devices

Multifactor security via Device Access Control—pairing a user credential with a specific device

Military-strength AES-256 encryption of assets in flight and at rest

Compliant with regulatory and security guidelines such as FIPS 140-2, FINRA and HIPPA

Ease of Administration

No MDM required—manage data, not devices

All BYOD Suite elements run as native apps

Wiping enterprise assets leaves personal assets unharmed

Use individual or group-level policies for security and information access rights

Note: See BYOD Suite System Requirements (page 2).

Functions Description

BYOD gateway Installation (page 4)

For administrators to install BYOD gateways.

BYOD gateway - Configuration (page 13)

For administrators to configure BYOD gateways.

Secure Browser (page

35) For mobile users accessing BYOD Suite site menus.

Secure Docs (page 42) For mobile users viewing and editing BYOD Suite documents.

Secure Mail (page 47) For mobile users accessing BYOD Suite site email.

BYOD Suite Module Requirements Server Technology

The BYOD gateway server requires the following:

Microsoft Windows Server 2008, 2008 R2, 2012, 2012 R2

NET Framework 3.5 is required on all systems.

Memory - The amount of random access memory (RAM) that’s required depends on many factors, including the requirements of other services, the size of frequently accessed content files, and the RAM requirements of Add-on Connectors. In most installations, it is recommended that you use at least 2 gigabyte (GB) of RAM. High-volume servers should have a minimum of 2 to 4 GB of RAM.

Disk drives - BYOD gateway itself takes less than 15 MB of disk space. The additional data storage capacity required depends entirely on the size of your gateway's content files, configuration files, system files and virtual memory.

Supports single processor or multiple processor installation.

Installed as a service and includes support for AD/LDAP integration and .NET Framework. Support for x86 is required for some components.

Quick Start

3

Browsers

The BYOD gateway Control Panel can be accessed using the latest versions of IE, Chrome, Safari, and FireFox browsers.

Ports

Port 443 is the outbound port used by a gateway to communicate with the relay service over SSL. There is no inbound port for relay connection.

Port 8080 is the inbound default port for portal (mobile device) access when using direct connection. If you're using the direct connection, you need to allow inbound connections on that port. It can be setup for HTTP or HTTPS, depending on whether the gateway has a valid SSL certificate installed.

Port 1456 is the inbound default port for Control Panel access. Open this port to allow remote access to the BYOD gateway Control Panel.

Client Technology

BYOD Suite container apps—Secure Browser, Secure Docs, Secure Mail—are supported on the following types of mobile device operating systems:

iPhone running iOS 6.0 or later

iPod Touch running iOS 6.0 or later

iPad running iOS 6.0 or later

Android – with carrier supported OS 2.3 or later and tablets OS 4.x or later

Quick Start 1. Installation & Setup

Download the gateway and BYOD Suite apps from www.kaseya.com > Solutions > BYOD Suite (http://www.kaseya.com/solutions/byod)

Review the step-by-step guide for Gateway Installation (page 4).

2. Using the Apps

Secure Browser (page 36)

Secure Docs (page 42)

Secure Email (page 47)

3. Access Your Data

File/Directory (http://help.kaseya.com/webhelp/EN/BYOD/R8/tutorials/index.asp#12535.htm) - Configure access to files and folder using the BYOD gateway.

Intranet Sites (http://help.kaseya.com/webhelp/EN/BYOD/R8/tutorials/index.asp#12538.htm) - Configure access to intranet sites using the BYOD gateway.



http://help.kaseya.com/webhelp/EN/BYOD/R8/tutorials/index.asp#12535.htm


BYOD gateway Installation

4

BYOD gateway Installation The BYOD gateway Setup Wizard walks you through the installation process. Once the BYOD gateway software has been installed, you will need to register and activate your BYOD gateway prior to use.

To install as a service you must run the install as an administrator.

On 64 bit OS versions the BYOD gateway program files are installed in C:\Program Files

(x86)\BYOD gateway. On 32 bit OS versions the files are installed in C:\Program

Files\BYOD gateway.


In This Section

1. Welcome 4 2. License Agreement 5 3. Install Location 5 4. Successful Installation 6 5. BYOD Gateway Startup 8 6. Register Your Gateway 9 7. Activate Your Gateway 10 8. Get Started Using Your BYOD gateway 11 9. BYOD gateway Control Panel 11 10. Installing Secure Browser 12

1. Welcome Select Next to continue the installation.


5

2. License Agreement Select I Agree to continue the installation.

3. Install Location Choose an install location.


6

4. Successful Installation Select Finish to complete the installation. If the Start Kaseya BYOD gateway service now option is selected, the BYOD gateway service should start automatically. This service is set to run automatically every time you start the PC.

Your browser should open a new window or tab and display the BYOD Gateway Startup (page 8) page. If this page does not display:

See Verify the Service is Running (page 7).

See Relay Connection Test (page 8) if starting your displays a Gateway connectivity check page.


7

Verify the Service is Running The BYOD gateway service can be started and stopped by using the shortcuts provided in the BYOD gateway Start Menu.

To verify the BYOD gateway service is running or to configure the service settings start Microsoft

Services Management Console. Run services.msc to start the Services Management Console. The

Kaseya BYOD Gateway Service should display a status of Started.

You can also start the BYOD gateway from a Windows command prompt. Enter:


8

net start byodgateway

The service should either start successfully or report that the service is already running.

Navigation

You should now be able to access the BYOD gateway with you browser by:

Selecting Manage Kaseya BYOD gateway from the Windows start menu, or by

Entering http://localhost:1456 in the browser address bar.

If this is the first time you have connected to the gateway, the browser should display the BYOD Gateway Startup (page 8) page.

Additional Troubleshooting Steps

If you still have problems:

Review the startup troubleshooting log (https://helpdesk.kaseya.com/entries/34419766), located in your gateway's data directory (page 53).

Check the Windows event log under Applications for relevant messages.

Ensure that firewall or other security software is not blocking access to port 1456 on this machine.

Uninstall the gateway (Start > BYOD gateway > Uninstall) and run the installer again as an administrator.

Relay Connection Test When you start the Control Panel it performs a test to make sure the BYOD gateway can connect to the relay service. If there are any problems with the connection you will see this screen.

If your server connects to the internet through a proxy server you will need to fill out the proxy setting to allow the BYOD gateway to connect through the proxy server. If you are not sure if you connect through a proxy server or do not know the proxy server address, try running the Scout (page 54) utility to get more information.

If this is the first time you have connected to the gateway, the browser should display the BYOD Gateway Startup (page 8) page.

5. BYOD Gateway Startup The first time your browser connects with the BYOD gateway, the Kaseya BYOD Gateway Startup page displays. You can use this page to test for the blocking of active web content, and disable it, if blocking is enabled.

https://helpdesk.kaseya.com/entries/34419766


9

After that click the Click here to manage the gateway to connect to the gateway.

Or you can manually enter the following in the browser address bar:

http://localhost:1456

The browser should display the Step 1: Register your gateway (page 9) page.

Note: Ignore the here if you have enabled SSL on the gateway control panel link.

6. Register Your Gateway The first time your browser connects with the BYOD gateway, the Step 1: Register your gateway page prompts you to register your gateway. Fill in the fields to complete the registration.

Note: The email address and password you enter serves as your gateway administrator logon credential.


10

7. Activate Your Gateway Activate your gateway using the Step 2: Name and activate your gateway page.

Gateway title - Enter the name of your gateway. This name will be shown to BYOD Suite mobile device users to identify this BYOD gateway. Including the company name in the gateway name is recommended. Unique names for each gateway you install is also recommended. You can change the name of a gateway at any time, using the BYOD gateway > Control Panel - Site tab (page 15).

Relay service - Choose a geographical area that is nearest to your server's physical location.

Have you purchased a Kaseya BYOD license? - If you already have a Kaseya license key you will be able to use your existing license key to activate your gateway.

Yes, I have purchased BYOD seat licenses

Kaseya license key - Enter your current Kaseya license key. Example: ABCDEF999-9999-8888-7777-666666666666

Do you use Kaseya cloud services (SaaS) - Yes or No.

No, but I received a BYOD Trial Key - If you do not have a Kaseya license key you

can use the BYOD Trial key you received via email when you requested the BYOD Suite trial.

BYOD Trial key - Enter your BYOD Trial key.

No, and I NOT have a BYOD Trial Key - If you do not have a Kaseya license key

and you have not received a BYOD Trial Key please check your email for the BYOD Trial key. When you filled in the form to download and trial the BYOD solution, you entered an email address. That address should receive an email containing the key. If you have not yet receive it, please look through your spam filters and junk mail folders.


11

8. Get Started Using Your BYOD gateway The Step 3: Gateway activated... get started page lets you know that activation was successful. It also generates an Access Code that every BYOD Suite mobile device user requires to access the unique gateway you have installed.

Select Continue to begin configuring your BYOD gateway.

9. BYOD gateway Control Panel Congratulations! Your BYOD gateway is up and running and ready to configure. The BYOD gateway Control Panel lets you manage your site content, users, and policies. Use the following resources.

Tutorials - A series of BYOD Suite: Tutorials guides you through your first BYOD gateway configuration.

Online Help - The BYOD gateway Configuration (page 13) section describes each Control Panel tab in detail.

Note: All configuration data is saved in a data directory (page 53). Backing up the data directory is

recommended.

Navigation

If you close the browser you can always access the Control Panel at any time.

You can access the BYOD gateway Control Panel on the system hosting the BYOD gateway by:

Selecting Manage Kaseya BYOD gateway from the Windows start menu.


You can access the BYOD gateway Control Panel remotely by:

Entering http://<YourBYODgateway>:1456 in the browser address bar.

Ensure your firewall's inbound port 1456 is open.


12

10. Installing Secure Browser If you haven’t done so already, install the Secure Browser on your iPhone or iPad and log in using the user name and password defined for your user account. This will let you test access to content published by your BYOD gateway. You are required to install and connect to your BYOD gateway from the Secure Browser before using the Secure Docs or Secure Mail apps. The Secure Docs and Secure Mail apps use the BYOD gateway configuration from the Secure Browser to connect to the same BYOD gateway and retrieve the Secure Docs and Secure Mail configuration data. Once you have configured the Secure Browser and are connected to your BYOD gateway you can then install the Secure Docs and Secure Mail apps.

Software Download

www.kaseya.com > Solutions > BYOD Suite (http://www.kaseya.com/solutions/byod)

For more information on using the Secure Browser see Retrieving Your First Data (page 36).

Support Information

The BYOD gateway can provide contact/support information about your gateway to the client. The

BYOD gateway data directory (page 53) contains a file named support.html. Edit the

support.html file with your support contact information to make this information available to your

users. This information is shown to the client when the user selects the blue chevron to the right of the gateway name in the Sites list.

Note: For iOS 7 and later select the circled i icon to the right of the gateway name.



BYOD gateway Configuration

13

BYOD gateway Configuration The BYOD gateway is your company's secure point for controlling mobile access to your vital business information. After installation (page 4), use the intuitive, web-based gateway's Control Panel (page 14) to:

Define menus and business information sources.

Create mobile user accounts.

Set policies for secure access to that information.

Note: All configuration data is saved in a data directory (page 53). Backing up the data directory is

recommended.

In This Section

Control Panel - Logon 13 Control Panel - Tabs 14 Control Panel - Home tab 14 Control Panel - Site tab 15 Control Panel - Mail tab 22 Control Panel - Documents tab 23 Control Panel - Users tab 24 Control Panel - Network tab 28 Control Panel - Devices tab 30 Control Panel - Policies tab 31 Control Panel - Help tab 32 Control Panel - About tab 32 Customizing Secure Browser Startup 33 Customizing the Site Icon 34

Control Panel - Logon

Navigation

You can access the BYOD gateway Control Panel on the system hosting the BYOD gateway gateway by:

Selecting Manage Kaseya BYOD gateway from the Windows start menu.


You can access the BYOD gateway Control Panel remotely by:

Entering http://<YourBYODgateway>:1456 in the browser address bar.

Ensure your firewall's inbound port 1456 is open for remote access.

Logon

If you are the administrator who installed the gateway, logon to the BYOD gateway by entering the same email address and password you used to register the BYOD gateway when it was installed.

The Username and Password fields are case sensitive.


14

To reset an administrator password, select Need to reset your password? A new password will be e-mailed to the gateway administrator.

Control Panel - Tabs The BYOD gateway Control Panel is organized into 11 tabs.

Home (page 14) - Provides information to help you get started using the Control Panel.

Site (page 15) - Selects the files, folders and URLs published to your Secure Browser users.

Mail (page 22) - Configures email settings for Secure Mail users.

Documents (page 23) - Define editable document sources published to Secure Docs users.

Users (page 24) - Creates and manages BYOD Suite user accounts.

Network (page 28) - Manages network access from BYOD Suite users to your BYOD gateway.

Devices (page 30) - Specifies the devices allowed to access BYOD Suite content.

Policies (page 31) - Selects policies that determine access to BYOD Suite content.

Help (page 32) - Provides tips and to ask questions about getting the most out of BYOD Suite.

About (page 32) - Provides information about your instance of the BYOD gateway.

Control Panel - Home tab BYOD gateway > Control Panel > Home tab

The Home tab provides the Status of the overall health of a BYOD gateway and displays News about BYOD Suite.


15

News

Each News item shows the date and time it was posted and can be deleted if no longer needed.

Status

Status messages are color coded.

Green messages tell you everything is running as expected.

Yellow messages indicate something could be improved.

Red message indicate a problem that should be corrected.

If a newer version of the BYOD gateway is available you will see a Status message with information on how to get the latest version.

Control Panel - Site tab BYOD gateway > Control Panel > Site tab

The Site tab specifies the site menu, site title and site icon shown to mobile users when they run BYOD Suite on their mobile devices.

Site Menu

The left side of the Site tab provides a preview of how the menu displays on a mobile device.

Clicking the Add item to this menu (page 16)... enables you to make company information available to Secure Browser mobile users.

The menu can have as many items as you like, but it's usually better to break long menus into smaller submenus.

Site Title

The Site title identifies this gateway to users running BYOD Suite on their mobile devices. The default title was set when the gateway was registered (page 9) during installation. Ensure the Site title is appropriate for your mobile users.


16

Gateway Icon

A default icon is displayed next to the gateway name when mobile users run BYOD Suite on their mobile devices. If you want to use a custom icon to represent your gateway instead of the BYOD Suite

default icon you can generate a 48x48.png and save it as siteicon.png in the BYOD gateway data

directory (page 53).

In This Section

Add item to this menu... 16 The contents of a file 17 Files and subfolders in a folder or network share 18 A submenu 20 Non-proxied link to an external Web site 20 Intranet Tunnel access to company Web resources 20 Static Web content from a directory 21

Add item to this menu... Site > (Company Site) > Add item to this menu...

The Site menu determines the secure and encrypted content users see in their Secure Browser (page

35) app on their mobile device when connecting to this BYOD gateway. The Site menu can include six different types of items.

The contents of a file (page 17) - The contents of single file.

Files and subfolders in a folder or network share (page 18) - Multiple files and folders.

A submenu (page 20) - A menu of additional items, including other menus.

Non-proxied link to an external Web site (page 20) - A link to a web site that is directly accessible via the device's normal network connection.

Intranet Tunnel access to company Web resources (page 20) - A link to an intranet site. The BYOD gateway acts as an intermediary for requests to this internet site.

Static Web content from a directory (page 21) - Static HTML pages stored in a BYOD gateway directory.

Editing Menu Items

Individual menu items can be edited by selecting the menu item. Once selected, the description of the menu item is displayed to the right of the menu under the heading label Description.

Select Change setup for this item... to edit the selected menu settings.

Selecting a submenu changes the menu view to a submenu view.

To navigate back to the previous menu view use the navigation links at the top of the page.

Select the menu name to restore the view of that menu.


17

The contents of a file Site > (Company Site) > Add item to this menu... > The contents of a file

Selecting The contents of a file option enables you to publish the contents of single file to mobile device users running the Secure Browser app.

Note: Users cannot edit the contents of files shown in Secure Browser. See Secure Docs (page 42) for

managing files that can be edited.

Title - Enter a name for this menu item.

Note: The Gateway URL mount point is no longer supported and should not be used.

Choose... - Select to browse for a file.

For a file on a local drive of the gateway, use the full pathname to the file. Example: C:\aaa\filename.txt

For a file on the gateway's network, use Universal Naming Convention (UNC) notation to

specify the file. Example: \\MyServer\filesharename\directoryname\filename

Enforce Windows user access control - If checked, Windows authorization is required to access this file when the Secure Browser user selects this item to view it. If checked, Users without Windows accounts, either:

may not access this item, or

access this item under gateway permissions - Selecting this option enables users that have a BYOD gateway managed password to access the file without a Windows user accounts. A BYOD gateway managed password can be set—instead of using Windows authentication—using the BYOD gateway > Control Panel - Users (page 24) tab.

Save item setup - Select to add this item to the current menu.


18

Authorization

If the network resource requires user authorization to access you may also need to change the account the BYOD gateway service uses to log on. By default the BYOD gateway uses the Local System account, which has no users and therefore will not be able to access network resources that require user authorization. You can select to have Windows authorization enforced for the file or folder resource selected. If Windows authorization is selected you can use the BYOD gateway service account or the mobile user account. If you select to use the user account make sure you configure the user account as a Windows authenticated account.

Files and subfolders in a folder or network share Site > (Company Site) > Add item to this menu... > Files and subfolders in a folder or network

share

Selecting the Files and subfolders in a folder or network share enables you to publish multiple files and filders to mobile device users running the Secure Browser app.



Choose... - Select to browse for a folder.

For a folder on a local drive of the gateway, use the full pathname to the folder. Example: C:\aaa\files

For a folder on the gateway's network, use Universal Naming Convention (UNC) notation to

specify the file. Example: \\MyServer\filesharename\directoryname

Enforce Windows user access control - If checked, Windows authorization is required to access this folder when the Secure Browser user selects this item to view it. If checked, Users without Windows accounts, either:

may not access this item, or


19

access this item under gateway permissions - Selecting this option enables users that have a BYOD gateway managed password to access the file without a Windows user accounts. A BYOD gateway managed password can be set—instead of using Windows authentication—using the BYOD gateway > Control Panel - Users (page 24) tab.


Authorization

If the network resource requires user authorization to access you may also need to change the account the BYOD gateway service uses to log on. By default the BYOD gateway uses the Local System account, which has no users and therefore will not be able to access network resources that require user authorization. You can select to have Windows authorization enforced for the file or folder resource selected. If Windows authorization is selected you can use the BYOD gateway service account or the mobile user account. If you select to use the user account make sure you configure the user account as a Windows authenticated account.


20

A submenu BYOD gateway > Control Panel > Site > (Company Site) > Add item to this menu... > A submenu

Selecting the A submenu option enables you to publish any file or folder that the gateway can access to your remote users.

Title - Enter a name for this submenu.



Non-proxied link to an external Web site Site > (Company Site) > Add item to this menu... > Non-proxied link to an external Web site

Selecting the Non-proxied link to an external Web site option enables you to add the the URL of a website that is directly accessible to a devices network connection. See Proxied and Non-proxied Links (page

54).



URL - Enter a URL.

The URL must be available to the mobile user without using a BYOD gateway proxy (page

54).

The site content must be supported by the client's browser. Confirm the sites will work on the mobile device browser before attempting connection through a non-proxied link. For example, sites that use ActiveX or Flash will require support not available on iOS or Android browsers.


Intranet Tunnel access to company Web resources Site > (Company Site) > Add item to this menu... > Menu > Intranet Tunnel access to company

Web resources

Selecting the Intranet Tunnel access to company Web resources option enables you to make an intranet site or service available to Secure Browser users. Because the BYOD gateway gateway shares the same private network as the intranet site or service, it can act as an intermediary for requests from Secure


21

Browser mobile device users who are outside the intranet. See Proxied and Non-proxied Links (page

54).



URL - Enter a URL to a intranet site or service behind the same firewall as your gateway.

Add it now - If you receive the following error when saving your settings... This host is not listed in your gateway's proxy list policy.

... click the Add it now link to include the URL in the gateway's proxy list policy the next time you click Save item setup.

The URL must be available to the mobile user without using a BYOD gateway proxy (page

54).

The site content must be supported by the client's browser. Confirm the sites will work on the mobile device browser before attempting connection through the Intranet Tunnel. For example, sites that use ActiveX or Flash will require support not available on iOS or Android browsers.


Static Web content from a directory Site > (Company Site) > Add item to this menu... > Static Web content from a directory

Selecting the Static Web content from a directory option enables you to add static web pages stored in a directory on the system hosting your gateway. Static web pages are delivered exactly as stored and the same way for all users requesting those pages.



Base directory - Browse for the Base directory containing the static HTML content. All static content must be included in this directory or its sub directories.

Start page - Browse for the Start page location.

You only need to specify a Start page located in a sub directory under the base directory.

Enter the filename for the start page for the HTML content. For example, index.html.


22


Control Panel - Mail tab BYOD gateway > Control Panel > Mail tab

The Mail tab defines email configuration settings for your mobile users. You can define as many different setups as you need, and assign them to users or groups.

Setup

Description - The name of this mail server configuration.

Domain (Optional) - The domain of the mail server, if required. The domain may be different than your company’s website domain. Check with your administrator if you are uncertain what to enter here.

Exchange/ActiveSync Server - This is the name of the mail server that your mobile device connects to. Only Exchange ActiveSync (page 54) servers are supported. If you are using Outlook Web Access, this may be different from the Outlook Web Access server.

Skip server certificate check - If not checked, a client certificate is required to connect to the server. If blank, not certificate is required.

Email PIN policy - A PIN policy, if enabled, requires the mobile device user to enter a PIN number.

no PIN required for email; use device PIN only

honor PIN policy from Exchange/ActiveSync

PIN always required; override Exchange/ActiveSync

PIN NOT required; override Exchange/ActiveSync

Allow copy/paste in email

Yes; may share email data with other apps

No; copy/paste options are disabled in email


23

Note: When a copy/paste blocked policy is enabled in BYOD Suite, a copy/paste blocked policy

message now displays when a user attempts to copy from a secure container app into an external

app. Copying from an external app into a secure container app is never blocked.

Control Panel - Documents tab BYOD gateway > Control Panel > Documents tab

The Documents tab defines WebDAV document sources that you want to offer to mobile users using Secure Doc (page 42). This includes access to Office 365 online documents. The Secure Doc container app supports:

The display and editing of shared and local Microsoft Office and PDF documents.

The creation and storage of local documents on the user's mobile device using a feature called Secure Storage (page 45). Documents in Secure Storage are encrypted and remain isolated from the rest of the user's environment on the mobile device.

See Tutorial... (http://help.kaseya.com/webhelp/EN/BYOD/R8/tutorials/index.asp#12600.htm)

Setup

Description - A description of the document.

URL - The URL of the WebDAV document source.



24

Control Panel - Users tab BYOD gateway > Control Panel > Users tab

The Users tab creates and manages user accounts for mobile employees, trusted partners and guests using BYOD Suite on their mobile devices.

Actions

Search - Enter the first name, last name, or username in the Search box to filter the list of user accounts displayed.

Add a new user - Click to add a new user (page 25).

Edit - Click any user account on the left hand side of this tab to display the same user account details as add a new user (page 25).

Delete - Hover the mouse over the user and select the red ‘X’.

Automatically create accounts for users with valid Windows or AD/LDAP credentials - See Auto Discover Windows User Accounts (page 27).

New user's permission to use new devices - Sets the default device permission for new user accounts.

May not use new devices until administrator approval

May use up to <N> new devices until <period>

May use any device

Note: When a user is blocked by the gateway, the blocking occurs immediately and the app is

returned to an un-configured state.

Note: If the line ad_enabled = False is added to the gateway's config file, the gateway will use the

internal list of users, not Active Directory, as its source for access control lists. By default, the gateway

continues to use AD as its source of principals if AD is available.

Note: Nested group lookups of Active Directory forests are off by default. To enable nested group

lookups, add the following line to the byodgateway.ini: enable_nested_ad_groups = True

In This Section

Add a new user 25


25

Testing Window Domain User Accounts 26 Auto Discover Windows User Accounts 27

Add a new user BYOD gateway > Control Panel > Users tab > Add a new user

The Add a new user dialog creates a BYOD Suite user account. This includes both normal users and gateway administrator user accounts. Once a user is added to the gateway, access restrictions can be created limiting access to specific items using the BYOD gateway > Control Panel - Site (page 15) tab on a per-user basis.

Username - Enter the logon name for the user.

First name - Enter the first name of the user's "display name". The display name is shown to the user at various points in the user interface after he or she logs on.

Last name - Enter the last name of the user's "display name".

User may act as a gateway administrator - If yes, the user is a gateway administrator.

User logs on with their Windows password

Yes, associate this user with a Window account - If yes, enter a Windows username to associate with the BYOD Suite Username above.

Only Windows domain user accounts are supported, not local Windows accounts.

Use the domain logon format supported by your Windows domain. Typical formats

include domain\username or [email protected].

Entering the same BYOD gateway Username as the Windows username is recommended, so as to not confuse the user when he or she logs on.

At least one BYOD gateway administrator account should not be associated with a Windows account so you can logon to the BYOD gateway even if you are having issues with your Windows account.

Be sure to test logging on with a Windows domain user account (page 26).

No, this user will use a separate Rover password - Enter a BYOD gateway-managed password.

Rover password

Re-enter the password

Permission to user new devices - The user can also be configured to require administrator approval for any new device or be given automatic access for 1 or multiple devices.

May not use new devices until administrator approval

May use up to <N> new devices until <period>

May use any device


26

Save user information - Creates the new user account.

Testing Window Domain User Accounts

Testing Windows Authentication

Before adding additional Windows domain user accounts manually to the BYOD gateway, or enabling Auto discover of Windows user accounts (page 27), ensure the <BYOD3) can authenticate Windows accounts in general.

1. Use the BYOD gateway > Control Panel - Users (page 24) tab to create a gateway administrator user account using a Windows domain logon.

Use the domain logon format supported by your Windows domain. Typical formats include

domain\username or [email protected].

Enter the same BYOD gateway Username as the Windows username.

2. Log out of the BYOD gateway gateway.

3. Log on to the BYOD gateway gateway using the Windows domain username and password.

If you logon to the BYOD gateway gateway successfully, then similar Windows domain logons from BYOD Suite users on mobile devices will work as well. The only difference is they don't need to be designated gateway administrators.


27

Re-configuring the BYOD gateway to Support Windows Authentication

In most cases Windows authentication from the BYOD gateway gateway works without changing the default configuration of the BYOD gateway service. In some environments, Windows authentication may require changing the service account the BYOD gateway service uses to log on. By default the BYOD gateway uses the Local System account. The account used by the service must have permission to impersonate users and be part of the domain used to authenticate users.

Auto Discover Windows User Accounts User accounts can be automatically created for Windows authenticated users. To enable this feature check the Automatically create accounts for users with valid Windows credentials on the BYOD gateway > Control Panel - Users (page 24) tab.

Note: The Windows Guest User Account must be disabled for the auto discover feature to work. For more

information, see

Turn the guest account on or off

(http://windows.microsoft.com/en-US/windows-vista/Turn-the-guest-account-on-or-off).

With this feature enabled the BYOD gateway automatically creates a user account for any Windows authenticated users the first time they try to logon to the BYOD gateway from a BYOD Suite client. Auto discover Windows user accounts uses the default device permission set by the New user's permission to use new devices option.

Before enabling Auto Discover, test logging on with a Windows Domain User Account (page

26).

The first time a Windows domain user logs on to a BYOD Suite container app site, a new BYOD gateway user account is created that is associated with the user's Windows account. The

gateway.log (https://helpdesk.kaseya.com/entries/34419766) file records

whenever an account is created successfully under the log heading,

BYODLOG_AUTOACCEPTED_DEVICE. The gateway.log is located in your data directory (page 53).

http://windows.microsoft.com/en-US/windows-vista/Turn-the-guest-account-on-or-off

https://helpdesk.kaseya.com/entries/34419766


28

A BYOD gateway user account created using auto discover can be edited manually once the account has been created.

Deleted user accounts are not added back through the auto discover process. If you need to add a deleted user back, the account must be added through the Control Panel.

Control Panel - Network tab BYOD gateway > Control Panel > Network tab

The Network tab:

Identifies the access code used by BYOD Suite mobile device users to identify the site they want to logon to.

Selects the method used to communicate with a gateway: relay or direct.

Access Codes

A BYOD Suite mobile device users must enter an access code—a six-digit number—to identify the BYOD gateway they want to access. The gateway administrator must include that access code when creating an invitation for mobile device users to logon to a BYOD gateway. You do not need a new access code for each user. Each user logon also requires a valid username and password.

Request a new one - You can request a new access code by clicking this link, but only the most recent one can be used by new users.

Relay vs. Direct

There are two checkboxes on the Network tab that determine two different ways for clients to communicate with a gateway.

Kaseya BYOD Gateway Relay (default)


29

Kaseya BYOD Gateway Direct

Kaseya BYOD Gateway Relay

If this option is checked, mobile device users are given secure access to your gateway without requiring VPN or inbound TCP/IP connections from the internet. Using this object requires not further configuration on the gateway administrator's part. Relay is a separate cloud service maintained by BYOD Suite.

Relay allows secure exchanges between mobiles and gateways behind a firewall. Information is fully encrypted in transit and at rest on the devices for best-in-class protection of your data. The mobile devices never become network nodes, increasing security and reducing the need to manage devices.

If your gateway reports any errors using this method, verify your firewall is not blocking outbound connections to the relay service. See Verify Relay Service (page 54) for more information.

Port 443 is the outbound port used by a gateway to communicate with the relay service over SSL. There is no inbound port used by the relay connection.

Kaseya BYOD Gateway Direct

If this option is checked, mobile device users are required to make use of a company's own VPN or WiFi network to connect to the company's BYOD gateway. This option can improve performance for mobiles that are already on the corporate LAN through local WiFi connections or VPN tunnels. This option also enables corporations to deploy load-balanced clusters of gateways in DMZ's for high-volume situations, or where a DMZ deployment is preferred.

If this option is checked, you are prompted to enter your gateway's hostname and a port on which devices will connect to the gateway.


30

Gateway hostname - Defaults to the system's host name. This should be the network name or IP address mobile devices users can use to browse to BYOD gateway on their network. See SSL Support below for configuring a certificate for a gateway.

Gateway port - Ports 80 and 8080 are common selections, but you should choose one that isn't already used by other services that may be running on the same machine as your gateway.

Limit direct access to IP ranges - Enter one or more IP ranges in CIDR notation (example: 10.0.1.0/24, 192.168.1.0/24).

Save - When you've configured the hostname and port, click the Save button.

Test direct gateway access - Clicking this link opens a new browser window to check the connection

to your gateway. You can also test mobile connectivity by entering the URL http://<selected

hostname>:<selected port>/check into a web browser on a device that is on your local

network. If the direct connection is setup correctly you will receive the following message:

SSL Support

SSL support (https access) can be enabled for direct access. Using SSL requires a certificate and a private key, neither of which can be generated by the gateway. They must be provided by the gateway administrator. The key file must not contain a passphrase so it can run unattended.

By default SSL will be enabled if the gateway finds files called byodgateway-ssl.cer and

byodgateway-ssl.key in the gateway's data directory. If different filenames or locations are needed,

add these lines to byodgateway.ini:

portal_ssl_certificate = <full path to portal cert>

portal_ssl_private_key = <full path to portal private key>

Some SSL certificates require one or more intermediate certificates as part of an SSL certificate chain. The BYOD gateway requires a single SSL certificate file that contains the web server SSL certificate concatenated with all intermediate certificates creating a certificate bundle. This will produce a single certificate file with the intermediate certificates included at the end of the web server certificate. If you have a certificate that includes a certificate chain, check with your certificate provider to request a single file containing the certificate bundle.

Control Panel - Devices tab BYOD gateway > Control Panel > Devices tab

The Devices tab manages access to a BYOD gateway, by device.

Device Approval

Gateway administrators can require administrator approval of devices before allowing access. If administrator approval is required:

The user receives an "approval is required" message the first time he or she tries to access a BYOD gateway.

A new device shows the status of Pending until Approved or Blocked on the Devices tab.

The administrator then approves or blocks the devices. Device models and IDs are displayed along with user information.


31

Note: Some Android OS versions assign new device IDs if the application is uninstalled. The new device ID

will cause the device to appear as a new device and require approval again. For this reason it is

recommended to install updated versions of the BYOD Suite application without uninstalling the previous

version.

Pending devices display as a yellow row.

Approved devices display as a green row.

Blocked devices display as a red row. The next time a user attempts to login with that device any

gateway content on that device is wiped.

Control Panel - Policies tab BYOD gateway > Control Panel > Policies tab

The Policies tab sets security and data sharing rules for BYOD Suite clients.

Policies include:

Mobile access requires PIN entry

Only if enabled by user

Whenever application is activated

After 1 minute inactive

After 5 minutes inactive

After 15 minutes inactive

After 1 hour inactive

After 4 hours inactive

Mobile access requires password entry every

15 minutes

30 minutes

1 hour

2 hours


32

4 hours

8 hours

24 hours

2 days

4 days

Users may email item content to others

Yes

No

Users may open item content with non suite apps

Yes

No

Users may save images to device's photo library

Yes

No

Users may print non-suite content

Yes

No

Users may copy/paste to non-suite apps

Yes

No - A paste blocked by policy message displays when a user attempts to copy from

a secure container app into an external app. Copying from an external app into a secure container app is never blocked.

Hosts to which the gateway may provide proxy access

Host sites added using the Intranet Tunnel access to company Web resources (page 20) option are also added to this list.

*.* can be used as a wild card to match all sites.

Control Panel - Help tab BYOD gateway > Control Panel > Help tab

The Help tab provides two options for helping you get the most out of your BYOD gateway.

For general use questions, access to FAQs, and customer forums, go to Kaseya Support (https://helpdesk.kaseya.com/home).

Control Panel - About tab BYOD gateway > Control Panel > About tab

The About tab provides general information about an installed BYOD gateway.

The software version number of the BYOD gateway.

Software copyright.

https://helpdesk.kaseya.com/home


33

License ownership.

Support websites.

Privacy policy, terms and conditions.

The About page also describes the status of operational components. For example:

Gateway operating in service mode under user account SYSTEM

Direct connection to Kaseya BYOD Gateway Relay service

Provisioning service (provision.relay.kaseya.net) - OK

Gateway data directory: C:\ProgramData\Kaseya\Kaseya BYOD Gateway

Gateway database: sqlite:///C:\ProgramData\Kaseya\Kaseya BYOD

Gateway\byodgateway.db

Customizing Secure Browser Startup

Default Behavior

By default the Secure Browser displays the top menu on the Control Panel - Site (page 15) tab after the mobile device user logs on.

If the Site menu only contains one item the gateway sends the user directly to that menu item instead of showing a menu with one item in the list.

Customized Behavior

The BYOD Suite gateway can also be configured to display a specified menu or item when the mobile device user logs onto Secure Browser.

The site_home parameter in the byodgateway.ini file of a BYOD gateway is set to /node/1/ by

default. This refers to the site menu. Each menu item defined on the gateway can specify a Gateway

URL mount point. This serves as an alias to reference that specific menu item. The alias is used so

you can refer to the same item from different BYOD gateways. Each gateway may assign the same

item a different #. To return a specific menu item instead of the site menu, set the site_home

parameter to the menu item's node # or alias. Each new gateway has a Welcome menu defined as

/node/2/ by default on the gateway. To test this feature using the Welcome menu item set

site_home = /node/2/ or its alias which should be /apps/Welcome/. The BYOD gateway needs

to be stopped in order to edit the ini file and then restarted to use the new ini values. It is recommended

that you save a copy of the byodgateway.ini before making any changes in case you need to go

back to the default settings.


34

Customizing the Site Icon The Secure Browser client displays an icon for each BYOD gateway shown in the Sites list. A default icon is displayed if not specified.

To use a custom icon instead, add your icon to the BYOD gateway data directory (page 53) with the file

name siteicon.png. The custom icon should be size 48 x 48. See the Control Panel - About (page

32) tab for the location of your BYOD gateway data directory.

Secure Browser

35

Secure Browser This section provides information on using the Secure Browser client.

In This Section

Download Secure Browser 35 Add BYOD gateway to Your Site List 36 Delete BYOD gateway from Your Site List 38 Add Passcode to Secure Browser 38 Contact Gateway Administrator for Support 39 Save Files to Secure Docs 39 Full Screen Mode on IOS Devices 41

Download Secure Browser The Secure Browser is ideal for anyone who’s mobile and needs to stay connected to the office. Secure Browser provides secure access—in flight and at rest—to corporate intranets, files and directories. Selected files can by edited by saving files to Secure Docs (page 42).

Download the Secure Browser for:

Apple devices (https://itunes.apple.com/us/app/kaseya-secure-browser/id717279447?mt=8)

Android devices (https://play.google.com/store/apps/details?id=com.kaseya.byodsuite.browser&hl=en)


https://itunes.apple.com/us/app/kaseya-secure-browser/id717279447?mt=8

https://play.google.com/store/apps/details?id=com.kaseya.byodsuite.browser&hl=en

Secure Browser

36

Add BYOD gateway to Your Site List The first time you start Secure Browser you will receive the following prompt:

Note: If Secure Browser immediately shows you the Sites list, you may need to delete the existing site

before adding the correct one you want to connect to. See Delete BYOD gateway from Your Site List

(page 38).

1. Select Login to New Site to learn how to stay connected to the office.

2. Enter the Access code, User name and Password provided your BYOD gateway administrator.

The user name and password are case sensitive.

It is possible to configure the BYOD gateway to use your Windows password or to define a new BYOD gateway password.

Secure Browser

37

User credentials can be configured to use the user's Windows password or change the user's BYOD password (page 24).

The BYOD gateway site now displays in the Secure Browser Sites list.

3. Click the BYOD gateway site to navigate to the files and folders configured for that gateway.

Note: For information on how to configure files and folders displayed in Secure Browser, see the BYOD

gateway - Files Tutorial (http://help.kaseya.com/webhelp/EN/BYOD/R8/tutorials/index.asp#12535.htm).

4. Optionally select the blue chevron to the right of the gateway name to see support information about this gateway.


Secure Browser

38

Note: This feature is currently only supported on iOS devices.

Delete BYOD gateway from Your Site List Secure Browser only supports one BYOD gateway in the Sites list at a time. If the wrong BYOD gateway displays in the Sites list, you'll have to delete it before you can add the BYOD gateway you want to connect to.

Click Edit to delete a gateway already in the list.

Note:The Secure Docs and Secure Mail apps use the gateway configuration used in the Secure Browser. Before

deleting your gateway connection from Secure Browser make sure you no longer need that gateway

connection for your Secure Docs or Secure Mail apps.

iOS Delete Site

iOS devices include:

iPhone and iPod Touch (iOS 5 or higher)

iPad (iOS 5 or higher)

iOS devices allow sites to be deleted using the touch screen. From the Sites page select Edit. This allows you to select your gateway and then select Delete to confirm the deletion.

Android Delete Site

Android devices include:

Android devices (Carrier supported OS 2.3 or higher)

Android devices allow sites to be deleted using the touch screen. From the Sites page select and hold the BYOD gateway site name you want to delete. Select Delete to confirm the deletion.

Add Passcode to Secure Browser Secure Browser can be configured to require a passcode every time you launch the app. Refer to the appropriate section below for instructions on requiring a passcode on the mobile device you are using.

Secure Browser

39

A BYOD gateway can require Secure Browser to set a passcode before accessing the gateway. If the gateway requires a passcode you will be prompted to create a passcode the first time you attempt to connect to the gateway.

iOS Turn Passcode On

iOS devices allow Passcode to be set using the touch screen. From the Sites page select the lock icon in the lower left section of the screen. Select Turn Passcode On. You will be prompted to enter a passcode twice to confirm your passcode. Once you enter a passcode you will be required to enter this passcode every time you launch the Secure Browser app.

Android Turn Passcode On

Android devices allow the Passcode to be set using the Menu physical button. From the Sites page select the Menu button then select Settings. Select Create Passcode. You will be prompted to enter a passcode twice to confirm your passcode. Once you enter a passcode you will be required to enter this passcode every time you launch the Secure Browser app.

Contact Gateway Administrator for Support You may need to contact the gateway administrator if you are having any problems connecting to the gateway. If your gateway administrator setup their contact information on the gateway you can contact the administrator from the Site list.

iOS Contact Gateway administrator

From the Sites page select the blue chevron to the right of your gateway name. The page will flip to show "back of page" information about how to contact your gateway administrator.

Android Contact Gateway administrator

The gateway administrator support page is not currently available on the Android client.

Save Files to Secure Docs When browsing web sites through the Secure Browser you can preview files. While previewing a file you can save the file to Secure Docs (page 42) to edit the document.

Secure Browser

40

To save a file from Secure Browser to Secure Docs select the Share icon in the lower right corner of the Secure Browser while previewing a file. An Open option displays if your gateway policy allows you to save files. Multiple apps may display, depending on your gateway policies. Select the Secure Docs app to open the file in that app and save the file.

Secure Browser

41

Secure Docs will become the active app once you select to open the file in Secure Docs.

You will be shown the location of the file was saved in Secure Docs. This will be in your Secure Storage location in a folder named Inbox. You can now navigate to this location and edit, move, copy and save the file as you would any other file available to you in Secure Docs.

Note: Only copying or moving of files to Secure Storage is supported. Copying or moving of entire directories

and their contents are not supported.

Full Screen Mode on IOS Devices On iOS devices, HTML content can take over the full screen, removing the Secure Browser navigation menu. If this happens and the HTML content does not provide a way to exit, using a finger swipe up from the bottom of the screen will bring back navigation and full screen menu controls.

Secure Docs

42

Secure Docs This guide provides information on using the Secure Docs client.

In This Section

Download Secure Docs 42 Add BYOD gateway to Your Site List 42 Delete BYOD gateway from Your Site List 43 Add Passcode to Secure Docs 43 Sites List 43 Document Sources 44 Edit Files 44 Move, Copy, and Delete Files 44 Secure Storage 45 Favorites 45

Download Secure Docs Secure Docs enables editing of documents stored on a BYOD gateway or locally in Secure Storage on your mobile device. You can also move, copy or delete documents. Documents in Secure Storage are encrypted and remain isolated from the rest of the user's environment on the mobile device.

Download Secure Docs for:

Apple devices (https://itunes.apple.com/us/app/kaseya-secure-docs/id717417518?mt=8)



Add BYOD gateway to Your Site List The first time you start Secure Docs you will need to login to your BYOD gateway. Before using Secure Docs you will need to connect to your BYOD gateway using Secure Browser using the access code and user credentials required to login to your BYOD gateway. Once you have connected to the BYOD gateway from Secure Browser then Secure Docs will automatically add the same gateway to its Sites list to first time you start Secure Docs. You will be required to login to your BYOD gateway the first time you select the gateway from your Sites list. The credentials will be the same user name and a password used to login to Secure Browser. If you have not received credentials, contact your BYOD gateway administrator.

Note: User credentials can be configured to use the user's Windows password or change the user's

BYOD password (page 24).

https://itunes.apple.com/us/app/kaseya-secure-docs/id717417518?mt=8


Secure Docs

43

Delete BYOD gateway from Your Site List Once you have added a gateway to your Sites list, refer to the appropriate section below for instructions on removing a BYOD gateway from your Sites list.

Note:The Secure Docs and Secure Mail apps use the gateway configuration used in the Secure Browser. Before

deleting your gateway connection from Secure Browser make sure you no longer need that gateway

connection for your Secure Docs or Secure Mail apps.

iOS Delete Site

iOS devices include:

iPhone and iPod Touch (iOS 5 or higher)

iPad (iOS 5 or higher)

iOS devices allow sites to be deleted using the touch screen. From the Sites page select Edit. This allows you to select your gateway and then select Delete to confirm the deletion.

Android Delete Site

Android devices include:

Android devices (Carrier supported OS 2.3 or higher)

Android devices allow sites to be deleted using the touch screen. From the Sites page select and hold the BYOD gateway site name you want to delete. Select Delete to confirm the deletion.

Add Passcode to Secure Docs Secure Docs can be configured to require a passcode every time you launch the app. Refer to the appropriate section below for instructions on requiring a passcode on the mobile device you are using. A BYOD gateway can require Secure Docs to set a passcode before accessing any gateway. If the gateway requires a passcode you will be prompted to create a passcode the first time you attempt to connect to a gateway.

iOS Turn Passcode On

iOS devices allow a passcode to be set using the touch screen. From the Sites page select the lock icon in the lower left section of the screen. Select Turn Passcode On. You will be prompted to enter a passcode twice to confirm your passcode. Once you enter a passcode you will be required to enter this passcode every time you launch the Secure Docs app.

Android Turn Passcode On

Android devices allow the passcode to be set using the Menu physical button. From the Sites page select the Menu button then select Settings. Select Create Passcode. You will be prompted to enter a passcode twice to confirm your passcode. Once you enter a passcode you will be required to enter this passcode every time you launch the Secure Docs app.

Sites List The Sites list shows all the BYOD gateways you have access to. Each gateway can give you access to Document Sources (page 44) and control policies for how you access those Document Sources.

Select a gateway from your Sites list to see the Document Sources available. The documents sources

Secure Docs

44

from your gateway are displayed along with access to secure storage on your device. Select a document source on your gateway to connect to the gateway and retrieve a file list from the WebDAV document source.

The Sites list shows the BYOD gateway you have access to. The gateway gives you access to Document Sources (page 44) and controls policies for how you access those Document Sources.

Select the gateway from your Sites list to see the Document Sources available. The documents sources from your gateway are displayed along with access to secure storage on your device. Select a document source on your gateway to connect to the gateway and retrieve a file list from the WebDAV document source.

Document Sources Document Sources provided by this gateway are listed on this page. You can also access any documents stored in Secure Storage (page 45) on your device.

Depending on the authorization being used by the WebDAV document source you may be prompted to enter credentials to access the document source.

You can navigate Document Sources by selecting the source and then browsing the files/folders in that document source. While browsing a document source you can select the 'star' icon at the bottom of the list to add a 'favorite' location to your Document Sources list. Selecting the 'star' again will remove the folder from your list. Favorite selections are shown along with your other Documents Sources and provide a shortcut to return to the selected locations.

Selecting a file from Document Sources allows you to preview the file. Select the Edit button over the previewed file to launch the file editor.

Edit Files Selecting a file from Document Sources allows you to preview the file. Select the Edit button over the previewed file to launch the file editor.

When the editor first loads you can select the File icon and use the Save as option to save the current file to a new name and/or location. Once you start making edits to the file the File icon can be used to save the current file to the same name and location of the original file. If a save fails, verify you have write access to the document location.

For more help using features available in the editor see, http://www.picsels.com (http://www.picsel.com/).

Move, Copy, and Delete Files You can move, copy, and delete files from any location.

Select Edit from above the document source file list to see these options.

Select the file(s) you want to perform the move, copy or delete action on.

For Copy and Move actions you will be prompted to provide the name and location for the new file. To save a local copy of the file, copy or move to your Secure Storage (page 45).

To delete a file, select the Delete button. You will be prompted to confirm file deletions.

http://www.picsel.com/

Secure Docs

45

Secure Storage The Secure Storage shows all files you have saved locally.

Favorites Any folder beneath the root directory can be saved as a Favorite. To mark a folder as a Favorite select the 'star' icon at the bottom of the file list. The 'star' icon will darken to show this folder is now a Favorite.

Folders marked as a Favorite are displayed along with your document sources. Selecting the Favorite provides a shortcut to go directly to that location.

Secure Mail

47

Secure Mail This guide provides information on using the Secure Mail client.

In This Section

Download Secure Mail 47 Secure Mail Configuration 47 Attach a Document from Secure Docs 48 Save a Mail Attachment to Secure Docs 51

Download Secure Mail Secure Mail connects your mobile device to a mail server that supports Exchange ActiveSync (page 54) data synchronization.

Download Secure Mail for:

Apple devices (https://itunes.apple.com/us/app/kaseya-secure-mail/id717428537?mt=8)



Secure Mail Configuration The first time you start Secure Mail it will retrieve your ActiveSync (page 54) configuration from the BYOD gateway configured in the Secure Browser. Before using Secure Mail you will need to connect to your BYOD gateway using Secure Browser using the access code and user credentials required to login to your BYOD gateway. Once you have connected to the BYOD gateway from Secure Browser then Secure Mail will automatically show your ActiveSync configuration the first time you start Secure Mail. You will be required to login with your email password the first time you start Secure Mail.

If your configuration and connection is successful, the following screen shows your ActiveSync configuration.

https://itunes.apple.com/us/app/kaseya-secure-mail/id717428537?mt=8


Secure Mail

48

Once Secure Mail connects to your ActiveSync mail server you can select the folders you want to synchronize.

For more details about using Secure Mail see the appropriate user guide for your device:

Secure Mail iOS User Guide (http://help.kaseya.com/webhelp/EN/BYOD/R8/Secure_Mail_iOS_UserGuide.pdf)

Secure Mail Android User Guide (http://help.kaseya.com/webhelp/EN/BYOD/R8/Secure_Mail_Android_UserGuide.pdf)

Attach a Document from Secure Docs You can can attach a document in Secure Docs to a Secure Mail message.

1. Select the paper clip icon after starting to compose a new mail message.

A list of documents already attached to this mail message displays with a cloud icon at the top

of the page. The cloud icon enables you to attach additional documents. In the image below

http://help.kaseya.com/webhelp/EN/BYOD/R8/Secure_Mail_iOS_UserGuide.pdf

http://help.kaseya.com/webhelp/EN/BYOD/R8/Secure_Mail_Android_UserGuide.pdf

Secure Mail

49

no documents are attached to the mail message yet.

2. Select the cloud icon to link to Secure Docs and browse for the document you want to attach. Secure Docs should become the active application.

3. In Secure Docs select the site, then navigate to the document you want to attach to the mail message.

4. Select the document.

5. Select the Share link. Depending on how your BYOD gateway is configured you may see multiple apps you are allowed to share files with from Secure Docs.

Secure Mail

50

6. Select Secure Mail from the list of apps to share the file with.

Secure Mail displays as the active app.

Note: The file does not automatically update in the attached file list.

7. Close the list and select the cloud icon again to see your attached file in the list of attachments.

8. Continue to compose your mail message to send with the selected attached files from Secure Docs.

Secure Mail

51

Save a Mail Attachment to Secure Docs When you receive a Secure Mail message with an attached file you can save the attachment to Secure Docs.

1. Select the paper clip icon at the top of the mail message to see a list of attached files.

2. Click the file name to download the attachment.

3. Once the attachment has downloaded, click the file name again to open the file.

The document displays in a preview window.

4. Select the button in the upper right corner of the preview window to launch Secure Docs.

The file in the preview window is sent to Secure Docs.

Secure Mail

52

Secure Docs does not become the active app. This is because you may want to send several attachments to Secure Docs. You can continue to preview attachments in Secure Mail and send as many attachments to Secure Docs as you want.

5. Once you have sent all the files you want to Secure Docs, switch to the Secure Docs app.

Glossary

53

When you start Secure Docs after sending any file attachments from Secure Mail you are shown a message indicating files have been received and are now available in you Secure Store area under the folder Inbox.

6. Navigate to your Secure Storage within Secure Docs to find the sent files.

You can now edit, move, copy, or save these files as you would any file available within Secure Docs.

Glossary In This Section

Data Directory 53 Exchange ActiveSync 54 Proxied and Non-proxied Links 54 Verify Relay Service 54

Data Directory The BYOD gateway data directory is where YOUR BYOD gateway stores its configuration, logs and add-on connectors. The default locations are:

Glossary

54

C:\ProgramData\Kaseya\Kaseya BYOD gateway

C:\Documents and Settings\All Users\Application Data\Kaseya\Kaseya BYOD

gateway

Verify the location of the BYOD gateway data directory using the Control Panel - About (page 32) tab.

The data directory is a hidden folder so it does display by default using Windows Explorer. To navigate

to this location, manually enter the location C:\ProgramData in the Windows Explorer address bar.

The information in the data directory is unique to your BYOD gateway and should not be copied or shared with any other BYOD gateway. Be careful not to delete/edit any items in the BYOD gateway data directory as it could affect your BYOD gateway operation. Before making any changes it is recommended to make a backup of the BYOD gateway data directory. You can then restore the data directory back to a working copy when the backup was saved in the case your changes stop the gateway from working.

Exchange ActiveSync Microsoft Exchange ActiveSync (EAS) is a protocol designed for the synchronization of email, contacts, calendar, tasks, and notes from a messaging server to a smartphone or other mobile device.

Proxied and Non-proxied Links The Secure Browser container app allows mobile device users to access web-based content published by the BYOD gateway. Access is managed using two types of links.

Proxied links

Non-proxied links

Proxied

The Secure Browser container app uses a proxied link to access resources within the company network. A request for a resource is proxied through the BYOD gateway.

The BYOD gateway provides an Intranet Tunneling service that acts as an intermediary for requests from the container app to intranet sites or services. A proxied link is added using the BYOD gateway > Sites > Intranet Tunnel access to company Web resources (page 20) menu option. When added, a proxied host is also added to the proxy list policy, which is maintained on the BYOD gateway > Control Panel - Policies (page 31) tab.

Non-Proxied

A Secure Browser container app uses a non-proxied link to access a resource directly, instead of using the BYOD gateway as an intermediary. This is commonly used to access publicly available resources not hosted behind the company firewall. Content is still encrypted within the Secure Browser container app on the device and securely isolated from the rest of the device. A non-proxied link is added using the BYOD gateway > Sites > Non-proxied link to an external Web site (page 20) menu option.

Verify Relay Service You can verify whether system you intend to install the BYOD gateway on will be able to connect to the relay service used to communicate with BYOD Suite clients.

Note: Port 443 is the outbound port used by a gateway to communicate with the relay service over SSL.

There is no inbound port for used for the relay service.

Glossary

55

Scout

1. Download the Scout utility (http://download.kaseya.com/components/byod/scout/scout.exe) to the system you intend to install the BYOD gateway on.

Scout checks for required server components like .NET Framework as well as connectivity to the relay and provisioning services.

Run Scout with an -h command line parameter for supported command line options

Run Scout with –r command line parameter to specify a relay service to test. By default

Scout tests the US East relay service.

2. Double-click scout.exe to output log information to the command window. You should text

similar to:

Kaseya Scout 0.3.4 - gateway pre-deployment check

Gateway machine info - OK

- FQDN: ws-01.kaseya.com

- IP: 10.0.0.9

- CPU: Intel64 Family 6 Model 58 Stepping 9, GenuineIntel

- OS: Windows-7-6.1.7601-SP1

.NET framework availability - OK

- .NET frameworks installed: v4 Full, v4 Client, v3.5 SP1, v3.0 SP2, v2.0 SP2

Outbound proxy server info - OK

- No system-defined HTTP/S proxy server detected

Access to Internet using HTTP - OK

- Confirmed by accessing http://www.google.com/

Access to Internet using HTTPS - OK

- Confirmed by accessing https://encrypted.google.com/

Access to provisioning server - OK

- Provisioning server https://provision.relay.kaseya.net reports version

1.3.2

Access to relay service 'us-east' (mq.us-east-1.relay.kaseya.net:443) - OK

- Successful connection to relay server 'us-east'

------------------------------------------------------------------------

SUMMARY

------------------------------------------------------------------------

All checks were successful. System appears ready for Kaseya BYOD Gateway.

Report complete. Press Enter to exit:

If Scout does not report any errors, the BYOD gateway you install on the system will be able to connect to the relay service.

Specifying a Proxy Server and Port

If you connect to the internet via a proxy server make sure Scout reports the proxy server name used. If you use a proxy server but it is not a system defined resource then you may have to give Scout the proxy server information.

Use the following to force Scout to use a specific proxy server if it does not find it by default.

http://download.kaseya.com/components/byod/scout/scout.exe

Glossary

56

scout.exe -p http://proxyserver:proxyport

where proxyserver and proxyport are the hostname and port of your proxy server, respectively.

The -p option tells Scout to use that proxy, not the system-defined one.

If that works, Scout will show information at the end of the report reminding you to set proxy_server

in your byodgateway.ini.

You will be prompted to enter something like the following in you byodgateway.ini file.

proxy_server = http://proxyserver:proxyport

If your proxy server requires basic authentication you can provide credentials by using

proxy_server = http://proxyuser:proxypassword@proxyserver:proxyport

Before making any changes to the byodgateway.ini file it is recommended that you make a copy of

the ini file in case you need to reset to default values.

NTLM Authenticated Sites

Scout can also be used to test the Internet Tunnel (page 20) feature to NTLM authenticated sites using the following command line options:

scout-x.x.x.exe -q -x -d -w http://sitename/ -u DOMAIN\username:password

If scout returns a 200 status code, OK, then you should be able to configure the BYOD gateway to tunnel to the tested site.

Index

57

Index 1

1. Welcome • 4 10. Installing Secure Browser • 12

2

2. License Agreement • 5

3

3. Install Location • 5

4

4. Successful Installation • 6

5

5. BYOD Gateway Startup • 6, 8

6

6. Register Your Gateway • 9, 15

7

7. Activate Your Gateway • 10

8

8. Get Started Using Your BYOD gateway • 11

9

9. BYOD gateway Control Panel • 11

A

A submenu • 16, 20 Add a new user • 24, 25 Add BYOD gateway to Your Site List • 3, 12, 36, 42 Add item to this menu... • 15, 16 Add Passcode to Secure Browser • 38 Add Passcode to Secure Docs • 43 Attach a Document from Secure Docs • 48 Auto Discover Windows User Accounts • 24, 26, 27

B

BYOD gateway Configuration • 2, 11, 13 BYOD gateway Installation • 2, 3, 4, 13 BYOD Suite Module Requirements • 2, 4, 35, 42, 47

C

Contact Gateway Administrator for Support • 39 Control Panel - About tab • 14, 32, 34, 54 Control Panel - Devices tab • 14, 30 Control Panel - Documents tab • 14, 23 Control Panel - Help tab • 14, 32 Control Panel - Home tab • 14 Control Panel - Logon • 13

Control Panel - Mail tab • 14, 22 Control Panel - Network tab • 14, 28 Control Panel - Policies tab • 14, 31, 54 Control Panel - Site tab • 10, 14, 15, 25, 33 Control Panel - Tabs • 1, 13, 14 Control Panel - Users tab • 14, 17, 19, 24, 26, 27, 37,

42 Customizing Secure Browser Startup • 33 Customizing the Site Icon • 34

D

Data Directory • 8, 11, 12, 13, 16, 27, 34, 53 Delete BYOD gateway from Your Site List • 36, 38, 43 Document Sources • 43, 44 Download Secure Browser • 35 Download Secure Docs • 42 Download Secure Mail • 47

E

Edit Files • 44 Exchange ActiveSync • 22, 47, 54

F

Favorites • 45 Files and subfolders in a folder or network share • 16,

18 Full Screen Mode on IOS Devices • 41

G

Glossary • 53

I

Intranet Tunnel access to company Web resources • 16, 20, 32, 54, 56

M

Move, Copy, and Delete Files • 44

N

Non-proxied link to an external Web site • 16, 20, 54

O

Overview • 1

P

Proxied and Non-proxied Links • 20, 21, 54

Q

Quick Start • 3

R

Relay Connection Test • 6, 8

S

Save a Mail Attachment to Secure Docs • 51 Save Files to Secure Docs • 39

Index

58

Secure Browser • 2, 16, 35 Secure Docs • 2, 17, 23, 35, 39, 42 Secure Mail • 2, 47 Secure Mail Configuration • 3, 47 Secure Storage • 23, 44, 45 Sites List • 43 Static Web content from a directory • 16, 21

T

Testing Window Domain User Accounts • 25, 26, 27 The contents of a file • 16, 17

V

Verify Relay Service • 8, 29, 54 Verify the Service is Running • 6, 7