Migrating Samsung Devices From Cloud Proxy to Secure DNS Traffic Vectoring - Jamf Security Cloud Portal Setup Guide

Jamf Security Cloud Portal Setup Guide
Solution
Application
Jamf Connect
Content Type
Technical Documentation
Utilities & Services
ft:locale
en-US

Samsung devices can no longer use cloud proxy traffic vectoring, due to the deprecation of the Samsung setGlobalProxy API. To ensure uninterrupted internet content filtering, usage controls, and security capabilities on Android devices, you must redeploy these devices with secure DNS traffic vectoring. For more information about the deprecated setGlobalProxy API, see public int setGlobalProxy in the Samsung Knox SDK API Reference.

Requirements

If you use a third-party VPN, contact Jamf Support for instructions.

  1. (Optional) If you use an MDM to deploy and manage Jamf Trust, unassign and remove all Jamf Trust configurations from the devices:
    1. Unassign any pre-existing Jamf Trust managed app configurations.
    2. Remove the Jamf Trust app.
    3. Remove any associated Knox Service Plugin (KSP) Jamf Trust configurations, if applicable.
  2. Remove the Android devices configured with cloud proxy from the Jamf Security Cloud portal.

    For more information about removing devices from your portal, see Removing Devices from Jamf Security Cloud.

    Warning:

    You will lose all historical device data when you remove the device from Jamf Security Cloud. Export any important device information before deleting the record.

  3. In the Jamf Security Cloud portal, go to Devices > Activation profiles.
  4. Select an activation profile, or create a new one, that includes one or both of the following service capabilities, depending on your use cases:

    • Network security

    • Content controls

    Note:

    The default traffic vectoring is Secure DNS.

    For more information about creating a new activation profile, see Creating an Activation Profile using Jamf Security Cloud.
  5. Deploy the updated Jamf Trust configuration from the activation profile you just selected or created.

    For more information about deploying Jamf Trust with or without a supported MDM, see Distribution Methods for the Jamf Trust App​.

  6. Instruct your impacted Android users to open the Jamf Trust app on their devices and re-activate the app.

If you have questions or need assistance, log in to Jamf Account and click Contact Support in the top navigation.