Overview

You must create and configure the AppConnect security policy to monitor iOS devices for compliance. You can configure the following security settings for the iOS devices:

• Define the version of the iOS device on which you do not want users to install the inSync for MobileIron app.
• Enable or disable data protection. If disabled, users cannot access backup or share data on the inSync for MobileIron app.
• Restrict the iOS devices on which you do not want users to install the inSync for MobileIron app.

To make it easier for you to monitor compliance, you can auto-configure alerts for devices that are not compliant with the security policy that you define. The following table lists the alerts that you can configure, the conditions that the alert monitors, and the result when any of the conditions occur.

Create an AppConnect security policy

To create an AppConnect security policy

1. On the MobileIron ADMIN PORTAL primary navigation bar, click POLICIES & CONFIGS.
2. On the MobileIron ADMIN PORTAL secondary navigation bar, click Policies.
3. In the Add New list, click Security. The New Security Policy window appears.
4. Provide the appropriate information for each field.

   Field	Action
   Name	Type the name for this AppConnect security policy.
   Description	Type a short description for this AppConnect security policy.
   Access Control For iOS Devices	If you want to restrict access for AppConnect apps depending on the iOS version that is installed on the user's device: Select the check box for the first row. If you want to block Email, AppConnect apps, and send alert to the user, in the first list click Block Email, AppConnect apps, and Send Alert. If you want to only send a notification to the user, in the first list, click Send Alert. In the second list, click the iOS version for which you want to restrict access for AppConnect apps.
   	If you want to restrict access for AppConnect apps when data protection is disabled for the inSync for MobileIron app that is installed on the user's device: Select the check box for the first row. If you want to block Email, AppConnect apps, and send alert to the user, in the list click Block Email, AppConnect apps, and Send Alert. If you want to only send a notification to the user, in the list, click Send Alert.
   	If you want to restrict the apps that the iOS devices can use: Select the check box for the first row. If you want to block Email, AppConnect apps, and send alert to the user, in the list click Block Email, AppConnect apps, and Send Alert. If you want to only send a notification to the user, in the list, click Send Alert. In the Allowed box, click the iOS devices on which you do not want users to install the inSync for MobileIron app, and then click the right arrow key. The iOS device that you selected appears in the Disallowed box.​ Note: If you want to remove an iOS devcie from the Disallowed box, click the iOS device, and then click the left arrow key. The iOS device that you selected is removed from the Disallowed box.

5. Click Save. The New Security Policy window appears.
6. Click OK.

Update an AppConnect security policy

To update an AppConnect security policy

1. On the MobileIron ADMIN PORTAL primary navigation bar, click POLICIES & CONFIGS.
2. On the MobileIron ADMIN PORTAL secondary navigation bar, click Policies.
3. Select the check box for a policy for which you want to update the security settings. The Policy Details for that policy appears on the left pane.
4. On the left pane, click Edit. The Modifying Security Policy window appears.
5. After you make the required changes, click Save. The Modifying Security Policy window appears.
6. Click OK.

Delete an AppConnect security policy

To delete an AppConnect security policy

1. On the MobileIron ADMIN PORTAL primary navigation bar, click POLICIES & CONFIGS.
2. On the MobileIron ADMIN PORTAL secondary navigation bar, click Policies.
3. Select the check box for a policy that you want to delete.
4. Click Delete. The Policy Deletion window appears.
5. Click Yes. The Delete Policy window appears.
6. Click OK.

Note: You cannot delete the default security policy.

Next Step

Apply a label to policies.