Create a Device Level macOS Global HTTP Proxy Policy

This policy lets IT Admins preconfigure a global proxy server for macOS devices, in order to safely pass all traffic through an HTTP proxy set by this policy. HTTP proxies are used to secure users’ devices by inspecting their web traffic.

Prerequisites

• Apple Mobile Device Management (MDM) must be configured for your organization and Mac computers must be enrolled in JumpCloud MDM. See Set up Apple MDM. 
• This policy is supported on Mac computers running macOS 10.9 and later.
• Devices must have an active network connection for this policy to take effect.

Considerations

• The policy configuration settings are applied automatically and do not require a system restart.

Configuring the Policy

To create a Global HTTP Proxy policy for Mac computers, do the following:

Selecting the Policy Template

1. Log in to the JumpCloud Admin portal.

2. Go to Device Management > Policy Management. The Policy Management page is displayed.
3. On the Policy Management page, click +Add New.
4. Select Device Policy to assign the policy to devices and device groups. On the New Device Policy page:
   • Select the macOS tab.
   • Search and select the required policy and click Configure. The Details tab of the policy is displayed.
   • On the Details tab, configure the required policy configuration settings.
   • (Optional) In the Policy Name field, enter a new name for the policy or keep the default. Policy names must be unique.
   • (Optional) In the Policy Notes field, enter details such as creation date of the policy, and information on testing and deployment of the policy.

Configuring the Policy

• Under Type, choose one of these types:
  • Manual - If a proxy requires manual configuration, including server name, server port, or authentication, choose Manual. A manual proxy’s profile contains the proxy server address, server port, and optionally a user name and password. Manual is the default. 
  • Auto - Connect automatically to the destination through a proxy auto configuration (PAC) file. The PAC file is a JavaScript file that determines how  web browser requests are handled. 

• If you chose Automatic in Step 6, complete these fields:
  • For PAC URL, enter the URL for the PAC file that defines the proxy configuration. Only URLs that begin with http:// or https:// are allowed. For example, https://CentralProxy.com. This is not required for a Manual Proxy type.
  • For Port, enter the proxy server’s port number. For example, 80. This is not required for a Manual Proxy type.

• If you chose Manual in Step 6, complete these fields:
  • For Authentication, enter the user name to authenticate to the proxy server. For example, CentralProxy. This is not required for an Automatic HTTP Proxy type, unless access to your PAC file is protected by HTTP-Basic Authentication.
  • For Password, enter the password to authenticate to the proxy server. This is not required for an Automatic HTTP Proxy type.

• For Server Address, enter the proxy server’s network address.  
• Select Bypass Proxy to bypass the proxy server so that users can display the login page for captive networks. 
• Select Direct Connection to connect directly to the captive network if the proxy PAC file is unreachable.

Applying the Policy

• (Optional) Select the Policy Groups tab. Select one or more policy groups where you want to add this policy. 
• Select the Device Groups tab. Select one or more device groups where you want to apply this policy. For device groups with multiple OS member types, the policy only applies when a user logs into a supported Mac computer that is enrolled in Apple MDM.
• Or, select the Devices tab. Select one or more devices whom you want to add this policy to.
• Click Create Policy. A success message is displayed indicating the completion of policy creation.

Viewing Policy Status

1. Select the Status tab.
2. To see the last Result Log for a device where this policy is applied, click view.