Devices
The Devices tab shows a list of all of the organization-protected devices with no filters. On this screen, you can add, remove, edit devices, import and export their details, and activate them.
|
Note - For environments equipped with a Harmony Mobile Connector and with PII decryption enabled, an icon reflecting the status of the Connector appears on the top-right corner of the Devices screen.
|
Item |
Description |
||
---|---|---|---|
ID |
A unique ID that is generated for each device upon installation of the Harmony Mobile Protect App. It is used by the system as a reference to the device (instead of the device actual details for privacy). Device IDs with a status that requires attention are clickable. Click on a Device ID to navigate to the Device Risk screen with specific filters for the device. |
||
Name (Device Owner) |
Device name is given by the administrator when you send the registration link (or by UEM Unified Endpoint Management. An architecture and approach that controls different types of devices such as computers, smartphones and IoT devices from a centralized command point., if used for deployment). |
||
|
Email is an identifier. The registration email is sent to the device. When adding new devices, an email is sent to the email address defined in the wizard. Users logged on to devices with this email receive a registration request and are directed to download the App (Google Play store for Android or The Dashboard for iOS).
|
||
Device Number |
Device Number is also configured by the administrator or in UEM during the app installation link creation. This is usually the phone number for the device. This number only helps to identify the device, and is not used by the system. This field is optional. |
||
OS |
Device type (OS) is determined by the information received from the device upon the app installation. (iOS/Android/Android Enterprise) |
||
Device Details |
Device details are determined by the information received from the device post the Protect installation. |
||
OS Version |
OS Version is determined by the information received from the device post the Protect installation. |
||
Installed Patch |
The security patch version installed on the Android device. |
||
Client Version |
Client version indicates the Harmony Mobile Protect App version that is currently installed on the device. |
||
Status |
Status indicates the device current state:
|
||
Last Seen |
Indicates one of these:
|
||
Member of |
The device groups to which the device is added. Device groups imported from UEM are labeled with the UEM logo. |
||
Policy |
Policy enforced on the device.
|
||
UEM |
UEM that manages the device. |
Adding a New Device
Devices are invited to install the Harmony Mobile Protect App and register themselves in the dashboard through an invitation email generated from the dashboard under the Devices tab. Devices can be added through UEM sync as well. For customers who use UEM solutions such as BlackBerry, Workspace ONE UEM, or MobileIron, refer to the specific UEM in the Harmony Mobile UEM Integration Guide.
For customers who use Android Enterprise devices, please refer to the specific UEM integration guide for further guidance on how to configure UEM to synch Android Enterprise devices with Harmony Mobile.
The invitation is sent to an email address which must be read from the device. The first part of the email can be customized with customer specific message from Settings > Email customization.
-
iOS devices is redirected to install the app from the Apple App Store or to download the Enterprise signed App from the dashboard – this will be determined by a dashboard settings configured by Check Point. iOS installation consists of two steps in after the app is installed to activate. You must download iOS agent from the Dashboard and the Enterprise app must be trusted. After the installation process is completed, you must enter the server details and registration code. You will find the registration information and instructions in the registration email.
-
Android devices are redirected to Google Play Store to download the latest available Harmony Mobile Protect App. All registration information will be automatically entered by the system when using the download link in the email from the device during the installation process.
|
Note - For the Harmony Mobile solution to operate as expected on the end-user device, Harmony Mobile Protect App requires certain permissions. For more information, see Appendix D - Permissions for Harmony Mobile Protect App. |
-
Go to Devices > New and click Add new device.
The New Device window appears.
-
Do these:
-
In the Name field, enter the device name.
-
In the Email Address field, enter the email address of the device owner.
-
In the Phone number field, enter the phone number of the device owner.
-
In the Group field, enter the device groups to which you want to add the device.
-
-
Click Add.
The system sends an email with the registration details and instructions to install the Harmony Mobile Protect App.
When the device is added to the dashboard, an entry appears under the devices with a unique device ID. The device status is displayed as User Notified until the Harmony Mobile Protect App is installed and the device has communicated with the dashboard.
When the App is successfully installed and run from the device, the registration screen appears. For Android devices, the system enters the information automatically. On iOS devices, you must enter the information manually.
If the registration is successful, a full device scan is performed automatically. If no malware or malicious configurations are found, the app status appears in full green. If the communication with the dashboard is successful, the device entry changes from User Notified to Active, and the device details gets updated.
-
Go to Devices > New and click Import from file.
-
Select the file and click OK.
The system imports the device details to the Harmony Mobile Administrator Portal.
Adding a Device Group
You can assign devices to appropriate group when you add them to the system. You can also assign a group to the existing device.
To add a device group:
-
Go to Devices > Groups.
-
In the Manage Groups window, click .
-
Enter the Name of the group and select the Parent group.
-
Click Save.
Devices and device groups are imported from the Device Management platform during the integration.
Viewing Connected UEMs
The Connected UEMs option allows you to view the sync status of the UEMs integrated with your tenant.
To view the connected UEMs:
-
Go to Devices > Connected UEM.
The system shows a log of UEM syncs.
-
To force an immediate device sync call without waiting for the next auto sync cycle, click and then Sync now.
-
To temporarily stop or resume the device sync process, click and then Pause.
Managing Devices with More Actions
-
Go to Devices and click More actions.
-
To edit a device:
-
Select the device and click Edit.
The Edit Device window appears.
-
Enter the required details and click Apply.
-
-
To generate a registration code to enroll a new device:
-
Select the device and click Registration code.
The Registration Code window appears.
-
Access the Registration URL or scan the QR code on your mobile device.
-
Click OK.
-
-
To renew an existing device:
Note - The Renew option allows you to renew a device. It deletes a device, automatically adds the same device and send the registration information to the user, all in one click.
-
Select the device and click Renew.
The confirmation window appears.
-
Select the method to send registration information to the user and then click Yes.
The system deletes the device, automatically adds the device in the Harmony Mobile Administrator Portal with Status as User Notified and sends the registration information to the user.
-
-
To resend activation information to provisioned devices:
-
Select the device and click Resend Activation.
The Resend Activation window appears.
-
Select the method to send registration information to the user and then click Yes.
The system sends the registration information to the user.
-
-
To add or remove multiple devices in a device group:
Note - This procedure applies only to groups and devices added locally in the Harmony Mobile Administrator Portal.
-
In the Devices table, select the devices you want to add or remove.
-
Click Assign or remove devices from group.
The Add / Remove Devices From Group window appears.
-
Select the group and action.
-
Click Save.
-
-
To export devices:
-
In the Devices table, select the devices you want to export.
-
Click More actions > Export.
The Export Devices window appears.
-
Click Export.
The system generates and downloads a .CSV file with the device information.
If the number of devices exceeds 10,000, processing the data may take time. So the export is performed offline and an email is sent to the registered address with the link to download the CSV file. The link is valid for 7 days. For privacy reasons, PII data is obfuscated in the CSV file.
-
Click Done.
-
-
To delete a device:
-
In the Devices table, select the devices you want to delete.
-
Click More actions > Delete.
The confirmation window appears.
-
Click Yes.
The system deletes the devices from the Harmony Mobile Administrator Portal.
-
-
To send notification to devices:
Note - You can send notifications only to devices with Status as Active.
-
Select the devices from the Devices table.
-
Click More actions > Send notification to devices.
The Send Notification to Devices window appears.
- To send the notification to specific devices, from the Devices list, select the devices.
-
To send the notification to devices in a device group, from the Groups list, select the device group(s).
-
In the Title field, enter a title for the notification.
-
In the Content field, enter the message you want to notify the user.
-
Click Send.
The system sends the notification to the selected device/device groups.
Note - Due to limitations with Android and iOS, Check Point cannot guarantee that notifications will be received or read on mobile devices.
-
Filtering the Devices
To filter the devices:
-
Click above the Devices table.
-
On the Filters pane on the right side, select the required filters.
The Devices table shows the information based on the selected filters.