VMware Boxer Admin Guide v8 - 4

VMware Boxer Admin Guide
Configuring and deploying Boxer
AirWatch v8.4
Have documentation feedback?Submit a Documentation Feedback support ticket using the Support Wizard on
support.air-watch.com.
Copyright 2016 VMware, Inc. All rights reserved. This product is protected by copyright and intellectual property laws in the United States and other countries as well as by
international treaties. VMware products are covered by one or more patents listed at http://www.vmware.com/go/patents.
VMware is a registered trademark or trademark of VMware, Inc. in the United States and other jurisdictions. All other marks and names mentioned herein may be trademarks of their
respective companies.
VMware Boxer Admin Guide | v.2016.10 | October 2016

Copyright 2016 VMware, Inc. All rights reserved. Proprietary & Confidential.
1
Revision Table
The following table displays revisions to this guide since the release of AirWatch v8.4.
Date Reason
June 2016 Initial upload.
July, 2016 l VMware Boxer is now added with granular attachment restrictions in Boxer settings. For more
information, see Restrictions section.
l VMware Boxer end users can now use Touch ID (iOS9+ devices) when prompted for passcode.
For more information, see Passcode section.
l VMware Boxer can be configured for users who are enrolled with AirWatch Container. For more
information, see Other Notes section.
l VMware Boxer supports certificate for authentication. For more information, see Other Notes
section.
August, 2016 l Added information on the supported files types for Boxer. For more information, see
Requirements section.
September, VMware Boxer support for Android
2016
October, 2016 VMware Boxer support for Microsoft's Information Rights Management in Exchange server for iOS.

2
Table of Contents
Chapter 1: Overview 4
Introduction 5
Requirements 5
Chapter 2: Application Deployment 8

Configure and Deploy Boxer 9
Email Settings 11
Enterprise Wipe 15
Workaround for Third-Party Address Book iOS 16
Finding More Documentation 18

3
Chapter 1:
Overview
Introduction 5
Requirements 5

4
Chapter 1: Overview
Introduction
VMware Boxer is an email application that offers a consumer-centric focus on mobile productivity with enterprise-grade
security in the form of AES 256-bit encryption. This app containerizes business data from personal data, providing
frictionless access to enterprise email, calendar, and contacts across corporate-owned devices and bring your own
devices (BYOD). Boxer allows users to personalize the app to meet their needs with features like custom swipe gestures,
contact avatars, custom smart folders, and account color preferences. The all-in-one email, calendar, and contacts app
provides an intuitive user experience following native design paradigms on iOS and Android devices.
This admin guide is intended for administrators looking to configure Boxer as part of their AirWatch deployment. Setting
up Boxer is a simple process that involves configuring the various email settings and options you want to require or make
available to your end users.
Requirements
Meet the following prerequisites related to the AirWatch Admin Console, operating system, and email servers to deploy
Boxer as part of your MEMdeployment.
Console Requirements
l For iOS, AirWatch Admin Console v8.3.1 and higher
l For Android, AirWatch Admin Console v8.3 FP5 and higher
Supported Agent Version

Android iOS
l AirWatch Agent 6.0.1 and higher l AirWatch Agent 5.2 and higher
l AirWatch Container 3.0.1 and higher
Supported Devices
Android iOS
l Android Version 4.2 and higher l iOS 8 and higher
l iOS 9+ for Touch ID support

5
Chapter 1: Overview
Supported File Types

Android iOS
.doc, .docx, .dot, .dotx, .xls, .xlsx, .xltx, .csv, .doc, .pdf, .ppt, .txt, .jpg, .jpeg, .gif, .png, .mp3, .mp4, .avi, .wma, .vcf,
.ppt, .pptx, .pps, .ppsx, .pot, .potx, .pdf, .hwp, .excel, .html, .ics, .xml, .xls, .eml
.txt, .asc, .jpg, .jpeg, .png, .gif, .tiff, .bmp, .dib,
.wbmp, .tif, .wmf, .emf, .pcx
Email Infrastructure
l Supports the following email infrastructures for Boxer integration:
o iOS Exchange ActiveSync 2007, 2010, or 2013, 2016, Office 365
o Android Exchange ActiveSync 2007, 2010, 2013, 2016, Office 365
l Requires a Public trusted SSL certificate such as Symantec, GoDaddy, Verisign, and so on.
Other Integrations
l (Required)Directory service integration should be set up within your AirWatch environment to use lookup values for
the user account details.
For more information, see the VMware AirWatch Directory Services Guide, available on AirWatch Resources.
l (Optional iOS Only) Deploy the Email Notification Service (ENS) to provide real-time email notifications.
The Email Notification Service (ENS) adds Apple Push Notification support to Exchange. On iOS, a third-party app can
either get notifications using Apples background app refresh or Apple Push Notification Service (APNs) technologies.
Background app refresh is used by default because each app may provide notifications at irregular intervals using
this method. However, iOS attempts to balance the needs of all apps and the system itself. To provide notifications
quickly and consistently, Apple also provides APNs. APNs allows a remote server to send notifications to the user for
that application, however Exchange does not natively support this APNs. ENS adds APNs support to your
deployment to allow quick and consistent notifications about new items in your end users' email inboxes.
For more information, see the VMware AirWatch Email NotificationServices (ENS)Guide, available on AirWatch
Resources.
l (Optional)Configure one of the AirWatch email deployment models, either Secure Email Gateway (SEG) or
PowerShell.
For more information on choosing a MEMdeployment model, see the VMware AirWatch MobileEmail
Management (MEM)Guide, available on AirWatch Resources.
Other Notes
l iOS and Android VMware Boxer requires enrollment either through AirWatch Agent or AirWatch Container to
function. Additionally, Android VMware Boxer also supports Simplified Enrollment without AirWatch Container or
AirWatch Agent to function. Simplified Enrollment solely involves connecting to an existing VMware AirWatch
account.
l VMware Boxer supports certificate-based authentication.

6
Chapter 1: Overview
l Information Rights Management is supported through VMware Boxer for iOS platform currently.
l VMware Boxer does not support AirWatch SDK Profile settings currently.

7
Chapter 2:
Application Deployment
Configure and Deploy Boxer 9

8
Chapter 2: Application Deployment
Configure and Deploy Boxer

Configuring the Boxer application involves adding it as a public application, determining how end users should receive it,
and configuring emails settings.
You can only have one instance of the Boxer application configured and deployed in a given organization group. If you
require different Boxer configuration settings for different groups of users, then deploy the application in multiple
organization groups and assign each one to the appropriate groups.
The following process explains how to configure and deploy the Boxer application to iOSdevices. For more in-depth
instructions on deploying public applications, see the Mobile Application Management (MAM) Guide, available on
AirWatch Resources.
1. Navigate to Apps & Books > Applications > List View > Public.
2. Select Add Application.
3. Configure the fields that display and select Next.

Setting Description
Managed By View the organization group where the application is uploaded.
Platform Choose the appropriate platform. Only iOSand Android are supported at this time.
Source Select to search for the application in the app store or play store.
Name Enter "VMware Boxer".
4. Locate the VMware Boxer app in the Search results screen.
Note:In Apple Play Store, Boxer Lite and Boxer Pro may also appear in the search results. These are consumer
apps that do not offer AirWatch functionality.
5. Review the information that automatically populates in the Info tab.
6. Assign smart groups on the Assignment tab to determine who should receive Boxer.
l (Android Only) Enable Restrict To Devices That Support SilentActivity to assign application to only those
devices that support silent install or silent uninstall capability from the list of devices generated for the assigned
smart groups.
7. Configure settings on the Deployment tab to determine how your end users receive the app.

9
Chapter 2: Application Deployment
Setting Description
Push Mode Set the application to install automatically (auto) or manually (on demand) when needed.
l Auto Deploys content to a device upon enrollment. If the device is enrolled, this option
immediately prompts users to install the content on their devices. This option is the best choice for
content that is critical to your organization and its mobile users.
l On Demand Deploys content to the App Catalog and lets the device user decide if and when to
install it. This option is the best choice for content that is not critical to the organization. Allowing
users to download the content when they want helps conserve bandwidth and limits unnecessary
traffic.
Remove On Select this option to remove the Boxer application when the device unenrolls from AirWatch.
Unenroll
Apple iOS Important:Contacts data may remain on the device even if Boxer is removed, which may require
the end user to manually delete them. For more information, see Removing Email Access for Users.
Prevent This setting does not apply to Boxer, since the application is configured to always prevent application
Application backup.
Backup
Apple iOS
Make App Enable this setting if your end users may download Boxer from the App Store and you want to use the
MDM Remove on Unenroll setting.
Managed if Otherwise, Boxer does not have to be MDMmanaged.
User Installed
Apple iOS 9+
Use VPN This setting does not apply to Boxer, since solutions such as the Secure Email Gateway(SEG) are used
Apple iOS for accessing internal resources.
and Android
Application This setting is not used in a typical Boxer deployment. If you have them, you can enter Key Value Pairs
Configuration to enable certain settings.
Application This setting is not applicable to Boxer and should not be selected.
uses
AirWatch SDK
8. Use the Email Settings tab to configure account settings and restrictions to the app. For detailed instruction, refer
the Email Settings section to understand each of the settings.
9. Assign an Application Terms of Use, which displays when users first access the application from the App Catalog.
10. Select Save and Publish.

10
Email Settings
Configure the security and email management features for the Boxer application so they meet your organization's needs.
Account Information
Settings Description
Account Name Enter a description of the mail account.
Exchange Enter your EASserver URL.
ActiveSync For SEG deployments, enter the SEGURL instead.
Host
Domain, User, Enter the login information, including Domain name, User name, and Email Address.
Email Address By default, the login information includes {EmailDomain}, {EmailUserName} and {EmailAddress} as
defined as lookup values in your directory service. If you need to override these values, you can use
custom lookup values. For more information, see the VMware AirWatch Mobile Application
Management Guide, available on AirWatch Resources.
Password Enter the password to the email account or a lookup value for pulling the end users password from
(Android the user account.
Only)
Email Sync Set the number of past days of emails for Boxer to sync.
Period
Calendar Sync Set the number of past days of calendar events for Boxer to sync.
Period
Email Specify an email signature to be used on emails sent using Boxer.
Signature
Authentication Choose one of the following authentication types for end users to authenticate with Exchange using
Type the AirWatch credentials:
l Basic Authenticates using a username and a password.
l Certificate Authenticates using a certificate.

o Select the desired Certificate Authority and Certificate Template.
l Both Authenticates using a certificate to authenticate with network appliance and a password
to authenticate with Exchange.

11
Settings
Configuring the Email Sync Period, Calendar Sync Period, and Email Signature settings simply sets the default values for
these settings. End users can change these at any time within the Boxer application based on their preferences.
Email Sync Set the frequency at which Boxer syncs email.
Period
Calendar Sync Set the frequency at which Boxer syncs calendar events.
Period
Email Specify an email signature to be used on emails sent using Boxer.
Signature
Caller ID Enable to provide Caller ID functionality for all Boxer contacts.
By enabling this feature, Boxer exports names and phone numbers only to the native contacts app.
If end users have deleted their local address book, they may receive an error. See Third-Party Address
Book Workaround for more information.
Passcode
Setting an app-level passcode for Boxer also encrypts the application. Device users set their passcode on the device at the
application level when they first access the application.
l Type Choose the type of passcode; None, Numeric, or Alphanumeric.
o None Does not require a passcode.
Important:If Passcode is set to None, then the Boxer app is not encrypted. If you are not going to enforce an
app-level passcode, then AirWatch recommends you do enforce a device-level passcode using a device
profile, which encrypts the iOSdevice.

12
o Numeric Prompts the user with a numeric keyboard to set a passcode.
Touch ID Enable this option to use fingerprint to authenticate the application. The user will be asked to
(iOS enable Touch ID settings on device the first time when they are asked for their passcode and NOT
Only) when they create their passcode during first time setup.
Length Set the minimum number of numeric characters a user's passcode must contain.
Timeout Set the time in minutes until the application locks when idle.
Age Set the maximum allowed days for the passcode, after which passcode expires and has to be reset.
When the set amount of days exceeds, the client will ask the end user to create a new passcode.
History Determine the history of passcodes used to prevent the user from reusing passcodes.
Attempts Determine the maximum number of failed passcode attempts before the email data in the app are
erased.
o Alphanumeric Prompts the user with alphanumeric keyboard to set a passcode.

Touch ID Enable this option to use fingerprint to authenticate the application. The user will be
(iOSOnly) asked to enable Touch ID settings on device the first time when they are asked for their
passcode and NOT when they create their passcode during first time setup.
Length Set the minimum number of numeric characters a user's passcode must contain.
Complex Set the minimum number of character sets required for the passcode.
Characters Character sets include uppercase letters, lowercase letters, numbers, and symbols.
For example, if you select 2, then a passcode must contain at least two of the character
sets above. This can be a number and symbol:3!$#!$, uppercase and lowercase:RtGfH,
lowercase and symbol:p!$@!, and so on.
Timeout Set the time in minutes until the application locks when idle.
Age Set the maximum allowed days for the passcode, after which passcode expires and has
to be reset.
History Determine the history of passcodes used to prevent the user from reusing passcodes.
Attempts Determine the maximum number of failed passcode attempts before the email data in
the app are erased.

13
Restrictions
Personal If restricted, end users can no longer add any additional accounts to the application.
Accounts
Note:If end users already have Boxer on their device with personal accounts configured, then they are
prompted with a screen. This page asks them whether they want to remove their existing personal
accounts now or later. End users will not receive work email through Boxer until they remove all
personal accounts.
Copy If restricted:
Paste
l Endusers cannot copy and paste content from Boxer to other applications.
l If personal accounts are enabled, end users can copy and paste between personal and work accounts.
Therefore, you should consider disabling personal accounts if you want to completely restrict copy
and paste functionality.
l Share and Define options are made unavailable in the application when selecting text.
Hyperlinks If restricted, end users can only open hyperlinks in AirWatch Browser.
Note: You must enable this option if you are using the SEG deployment. The SEG dynamically modifies
the hyperlink to open in AirWatch Browser. For more information, see the VMware AirWatch Secure
Email Gateway Guide, available on AirWatch Resources.
Sharing Choose one of the following attachment restrictions based on the whether the end user can open emails
and their attachments in other applications:
l Preview Only Set this restriction for end users to only preview emails and attachments within Boxer
application. End users cannot open attachments into any other applications.
l Whitelist Set this restriction and specify bundle IDs of the applications for emails and their
attachments to open in those specified applications. The bundle ID for Content Locker (com.air-
watch.content.locker) and Evernote are prepopulated.
l Unrestricted Set this restriction for end users to open emails and attachments in any applications.
Attachment Encryption Using SEG

You can use the Secure Email Gateway (SEG) to enforce attachment encryption. This gives each attachment a custom file
extension that can only be opened using the VMware AirWatch Content Locker application.
Note: All attachment security, Data Loss Prevention (DLP), and encryption can be handled from within the Boxer app
itself.
For more information, see the VMware AirWatch Secure Email Gateway Guide, available on AirWatch Resources.

14
Enterprise Wipe
If you want to remove email access for end users, you can do it by performing an enterprise wipe for their selected device
or removing the user from the smart group the app is assigned to.
Performing an enterprise wipe also removes all personal accounts from Boxer. End users have to log in to those accounts
again in Boxer and sync to restore email for their personal accounts. Additionally, an enterprise wipe:
l Removes the Boxer application during unenrollment from AirWatch MDM if the Remove on Unenroll setting was
selected on the Deployment tab during the initial Boxer app configuration.
l Sends a sync request to the app to remove all Boxer data, including email, contacts, and calendar. Data is actually
removed only after the application syncs. Syncing occurs when the app is active and performs a scheduled sync, or
when the user launches the app. If an end user deletes the app before the sync, then the Boxer contacts still remain
on the device.

15
Workaround for Third-Party Address Book iOS
When end users configure an email account using the native iOSMail settings, they are prompted with a dialog asking
what they would like to do with existing local contacts. One option is to Delete, which lets end users delete their local
address books. If this happens, then the native iOSAddress Book is completely deleted, where Boxer stores its contacts if
Caller ID is enabled. As a result, end users cannot export Boxer contacts for Caller ID functionality.
End users can use the following steps to resolve this issue:
1. Navigate to Mail, Contacts, and Calendar in Settings and turn off Contacts sync for all accounts.
2. Launch the Boxer app and enable Caller ID in Settings.
3. Navigate back to the device's Settings and under Mail, Contacts, and Calendar, turn on Contacts sync for all
accounts.
End users are prompted with a dialog asking them whether or not they want to delete local contacts.
4. Select Keep on My iPad.

16
5. Select Keep, when prompted that this may cause duplicates.

17
Finding More Documentation

While reading this documentation you may encounter references to documents that are not included here. You can
access this documentation through the AirWatch Resources page (https://resources.air-watch.com) on myAirWatch.
Note: Always pull the document from AirWatch Resources each time you reference it.
To search for and access documentation on AirWatch Resources:

1. Navigate to http://my.air-watch.com and log in using your AirWatch ID credentials.
2. Select AirWatch Resources from the navigation bar or home screen. The AirWatchResources page displays a list of
recent documentation and a list of Resources Categories on the left.
3. Select your AirWatch Version from the drop-down menu in the search parameters to filter a displayed list of
documents. This selection limits the search to documentation that is specific to your version of AirWatch.
4. Access documentation using the following methods:

l Select a resource category on the left to view all documents in that category. For example, select Documentation
to view the entire technical documentation set. Select Platform to view only platform guides.
l Search for a particular resource using the search box in the top-right by entering keywords or document names.
l Add a document to your favorites and it appears in My Resources. Access documents you saved as a Favorite by
selecting myAirWatch from the navigation bar. Then select My Resources from the toolbar.
l Download a PDF of a document by selecting the button. Note, however, that documentation is frequently
updated with the latest bug fixes and feature enhancements. Always pull the document from AirWatch
Resources each time you want to reference it.

18
Having trouble finding a document?Make sure that you select a specific AirWatch Version. Searching All Versions
typically returns excessive results. Select Documentation from the category list, at a minimum. If you know which
category you want to search (for example, Platform, Install &Architecture, EmailManagement), then select that
category to narrow your search further and return better results. Limit File Type to PDFto limit the search to
technical documentation manuals.

19

VMware Boxer Admin Guide v8 - 4

Încărcat de

Informații document

Titlu original

Drepturi de autor

Formate disponibile

Partajați acest document

Partajați sau inserați document

Opțiuni de partajare

Vi se pare util acest document?

Este necorespunzător acest conținut?

Drepturi de autor:

Formate disponibile

VMware Boxer Admin Guide v8 - 4

Încărcat de

Drepturi de autor:

Formate disponibile

VMware Boxer Admin Guide

Configuring and deploying Boxer

VMware Boxer Admin Guide | v.2016.10 | October 2016

VMware Boxer Admin Guide | v.2016.10 | October 2016

Chapter 2: Application Deployment 8

Finding More Documentation 18

VMware Boxer Admin Guide | v.2016.10 | October 2016

VMware Boxer Admin Guide | v.2016.10 | October 2016

l For Android, AirWatch Admin Console v8.3 FP5 and higher

Supported Agent Version

l AirWatch Container 3.0.1 and higher

l iOS 9+ for Touch ID support

VMware Boxer Admin Guide | v.2016.10 | October 2016

Supported File Types

l VMware Boxer supports certificate-based authentication.

VMware Boxer Admin Guide | v.2016.10 | October 2016

VMware Boxer Admin Guide | v.2016.10 | October 2016

VMware Boxer Admin Guide | v.2016.10 | October 2016

Configure and Deploy Boxer

2. Select Add Application.

3. Configure the fields that display and select Next.

4. Locate the VMware Boxer app in the Search results screen.

5. Review the information that automatically populates in the Info tab.

VMware Boxer Admin Guide | v.2016.10 | October 2016

10. Select Save and Publish.

VMware Boxer Admin Guide | v.2016.10 | October 2016

l Certificate Authenticates using a certificate.

VMware Boxer Admin Guide | v.2016.10 | October 2016

VMware Boxer Admin Guide | v.2016.10 | October 2016

o Alphanumeric Prompts the user with alphanumeric keyboard to set a passcode.

VMware Boxer Admin Guide | v.2016.10 | October 2016

Attachment Encryption Using SEG

VMware Boxer Admin Guide | v.2016.10 | October 2016

VMware Boxer Admin Guide | v.2016.10 | October 2016

2. Launch the Boxer app and enable Caller ID in Settings.

4. Select Keep on My iPad.

VMware Boxer Admin Guide | v.2016.10 | October 2016

VMware Boxer Admin Guide | v.2016.10 | October 2016

Finding More Documentation

To search for and access documentation on AirWatch Resources:

4. Access documentation using the following methods:

VMware Boxer Admin Guide | v.2016.10 | October 2016

VMware Boxer Admin Guide | v.2016.10 | October 2016

S-ar putea să vă placă și