Follow these steps to enable the Cloud Extender® Auto-Quarantine
(AQ) feature for integration with HCL Traveler or IBM SmartCloud®.
About this task
The Auto-Quarantine (AQ) feature for
HCL Traveler provides the
following benefits:
- Prevents new devices from connecting to your email server with ActiveSync
- Automatically approves devices that are enrolled in MaaS360®.
- Automatically approves devices that receive email settings only from MaaS360.
- Automatically approves Secure Mail records.
- Automatically approves IBM Verse® client connections.
The Auto-Quarantine (AQ) feature is only supported for HCL Traveler 9.0+. You can
enable this feature directly on HCL Traveler. Existing
ActiveSync devices are not affected when you enable Auto-Quarantine (AQ).
Procedure
- Log in to the IBM®
MaaS360 Portal with Administrator
credentials.
- Select , and then click Edit.
- Configure policies in the HCL Traveler
section.
Option |
Description |
Require approval for any new device discovered |
Use the default setting, where the Cloud
Extender uses the
Auto-Quarantine (AQ) setting that is configured on the HCL Traveler server, or enable
or disable Auto-Quarantine (AQ). Supports only HCL Traveler 9/0+.
|
Notification Email address(es) |
A comma-separated list of email addresses that are notified when a new device is
quarantined. |
Number of devices per user before approval is required |
The Auto-Quarantine feature starts working when the user connects a device. If you set
the value to two, every user receives email on two devices without being quarantined. The third
device that syncs with HCL Traveler is
quarantined.
|
Auto-approve enrolled devices |
Automatically approves email connections from devices that are enrolled in MaaS360. The device is briefly quarantined before enrollment is
confirmed.
|
Auto-approve based on policies |
Automatically approves email connections from enrolled devices when the email configuration
is pushed from MaaS360. This setting requires that you
configure MDM or Persona policies to push email configuration to devices. This setting blocks all
connections from the device if the user manually configures email on email clients. Only MDM pushed
email configuration is approved.
|
Auto-approve Verse app on any enrolled device |
This option works only with the IBM
Verse for iOS app because
it uses an HCL Traveler
ID that is different from the device ID for an enrolled record. Android devices are automatically
approved based on enrollment status.
|
- Click Save and Publish.
The Secure Mail records are
automatically approved regardless of whether Auto-Quarantine (AQ) is enabled from the IBM
MaaS360 Portal or enabled
directly on HCL Traveler.