Configure device-wide URL filtering using Knox Service Plugin

Learn how to configure device-wide URL filtering for your managed Samsung devices using the Knox Service Plugin app.

Device-wide URL filtering allows you to control what websites users can access from the applications installed on their devices.

The overall configuration for device-wide URL filtering is as follows:

Device-wide policies (Selectively applicable to Fully Manage Device (DO) or Work Profile-on company owned devices (WP-C) mode as noted)
│
├─ Device customization controls (Premium)
│   └─ Enable device customization = True
│
├─ Enable device policy controls = True
│
└─ Firewall and Proxy policy
    ├─ Enable firewall controls = True
    └─ Name of firewall configuration to use = [Name]

Firewall configuration profile
│
├─ Domain filters
│   └─ Domain filter
│       ├─ Blocked domains = [Domains]
│       └─ Scope of domain filter = ALL_APPLICATIONS
│
├─ Firewall configuration name = [Name]
│
└─ Prioritize Domain filters over allow and deny rules = True

Requirements

To configure device-wide URL filtering for your managed Samsung devices, the following requirements must be met:

• You must have a Miradore Premium or Premium+ subscription, or an active trial.
• The requirements for using the Knox Service Plugin app must be met.
• Managed Google Play Enterprise must be configured for your Miradore site.

Configure device-wide URL filtering

1. Navigate to Management > Applications and select Add > Android application.
2. Select Managed Google Play store, then select Next.
3. Search for Knox Service Plugin and select its tile from the results.
4. Click Select.
   Result: The application's page opens. The same page can be opened by navigating to Management > Applications and double-clicking the application's row in the table.
5. On the Configurations tab, click Select configuration > Add configuration.
6. Enter a name for your configuration in the text box and press Enter.
   Note: You can make the configuration default for the application by ticking the Default checkbox.
   Result: The newly created configuration is open on the Configurations tab.
7. Add the Firewall configuration profile setting to the configuration by selecting the icon on the right.
   1. Select Add in the Add managed property to application configuration wizard.
   2. Select Close to exit the wizard.
8. Expand the Firewall configuration profile setting and add the Domain filters setting to the configuration by selecting the icon on the right.
   1. Select Add in the Add managed property to application configuration wizard.
   2. Select Close to exit the wizard.
9. Expand the Domain filters setting and add the Domain filter setting to the configuration by selecting the icon on the right.
   1. Select Add in the Add managed property to application configuration wizard.
   2. Select Close to exit the wizard.
10. Expand the Domain filter setting and add the Blocked domains setting to the configuration by selecting the icon on the right.
    1. In the Add managed property to application configuration wizard, enter the domains to block.
       Note: Enter one or more domains as a comma-separated list. Wildcards (*) at the beginning and/or end of a partial URL are also permitted.
    2. Select Add, then Close to exit the wizard.
11. Expand the Domain filter setting and add the Scope of domain filter setting to the configuration by selecting the icon on the right.
    1. In the Add managed property to application configuration wizard, select All applications from the Value drop-down list.
    2. Select Add, then Close to exit the wizard.
12. Expand the Firewall configuration profile setting and add the Firewall configuration name setting to the configuration by selecting the icon on the right.
    1. In the Add managed property to application configuration wizard, enter a name for the firewall configuration in the Value field.
    2. Select Add, then Close to exit the wizard.
13. Expand the Firewall configuration profile setting and add the Prioritize Domain filters over allow and deny rules setting to the configuration by selecting the icon on the right.
    1. In the Add managed property to application configuration wizard, select the Value checkbox.
    2. Select Add, then Close to exit the wizard.
14. Add the Device-wide policies (Selectively applicable to Fully Manage Device (DO) or Work Profile-on company owned devices (WP-C) mode as noted) setting to the configuration by selecting the icon on the right.
    1. Select Add in the Add managed property to application configuration wizard.
    2. Select Close to exit the wizard.
15. Expand the Device-wide policies (Selectively applicable to Fully Manage Device (DO) or Work Profile-on company owned devices (WP-C) mode as noted) setting and add the Device customization controls (Premium) setting to the configuration by selecting the icon on the right.
    1. Select Add in the Add managed property to application configuration wizard.
    2. Select Close to exit the wizard.
16. Expand the Device customization controls (Premium) setting and add the Enable device customization setting to the configuration by selecting the icon on the right.
    1. In the Add managed property to application configuration wizard, select the Value checkbox.
    2. Select Add, then Close to exit the wizard.
17. Expand the Device customization controls (Premium) setting and add the Enable device policy controls setting to the configuration by selecting the icon on the right.
    1. In the Add managed property to application configuration wizard, select the Value checkbox.
    2. Select Add, then Close to exit the wizard.
18. Expand the Device-wide policies (Selectively applicable to Fully Manage Device (DO) or Work Profile-on company owned devices (WP-C) mode as noted) setting and add the Firewall and Proxy policy setting to the configuration by selecting the icon on the right.
    1. Select Add in the Add managed property to application configuration wizard.
    2. Select Close to exit the wizard.
19. Expand the Firewall and Proxy policy setting and add the Enable firewall controls setting to the configuration by selecting the icon on the right.
    1. In the Add managed property to application configuration wizard, select the Value checkbox.
    2. Select Add, then Close to exit the wizard.
20. Expand the Firewall and Proxy policy setting and add the Name of firewall configuration to use setting to the configuration by selecting the icon on the right.
    1. In the Add managed property to application configuration wizard, enter the previously defined Firewall configuration name in the Value field.
    2. Select Add, then Close to exit the wizard.
21. Deploy the configured application to the managed devices.
    Tip: It is recommended to deploy the configuration to a test device first. If the test is successful, remove the Debug Mode setting from the configuration before deploying it to your managed devices.