Sign In with your
Trend Micro Account
Need Help?
Need More Help?

Create a technical support case if you need further support.

Installing InterScan Web Security as a Service (IWSaaS) on mobile devices

    • Updated:
    • 24 Feb 2015
    • Product/Version:
    • InterScan Web Security as a Service 2.0
    • Platform:
    • N/A N/A
Summary

Learn how to install InterScan Web Security as a Service (IWSaaS) in iOS and Adroid devices. 

Details
Public

Mobile VPN supports the iOS and Android platforms. With mobile VPN, each mobile user connects to IWSaaS and establishes an Internet Protocol Security (IPsec)-based VPN tunnel to send and receive traffic. Mobile VPN uses certificate-based authentication coupled with the mobile user’s username and password to authenticate the user when establishing the VPN tunnel.

To set up IWSaaS on a mobile device, go to Administration > Service Deployment > Mobile VPN.

Download the installation and setup file(s) in order to connect a mobile device with the IWSaaS service.

  1. Click the appropriate link to download the profile.

    You can pass this file to mobile users who want protection from the IWSaaS Service using a VPN.

  2. From the email sent by the system administrator, tap the iOS mobile profile or the network link to this file.
  3. From the Install Profile dialog box, tap Install.

    Install Profile

    Since this is a self-signed certificate, a warning message appears stating that this profile is unverified. There is no reason to be concerned about this.

  4. Tap Install.

    The warning message stating that this profile is unverified is nothing to be concerned about and requires no action from you. The Profile Installed screen appears displaying two certificates – the VPN Certificate Authority (CA) certificate and the mobile client certificate – as well as the various VPN settings such as VPN server name and proxy information.

    Unverified Profile warning message 

  5. Tap Install.
    If the mobile device is protected with a PIN, provide the necesarry information. 
  6. Tap Done.

    Once the certificates are installed and signed by a CA, the Unverified Profile warning message disappears and the installed profile appears in the Profiles screen.

    Tap Done 

    To view the newly installed profile, go to Settings > General > Profiles.

  7. Go to Settings > VPN > IWSaaS Mobile.

    Go to Settings > VPN > IWSaaS Mobile

     
  8. Tap on the small, blue arrow button.

    The Add Configuration dialog box appears for that VPN profile with the IPSec tab enabled.

    Add Configuration dialog box 

  9. From the Add Configuration dialog box, enter the account and password and then tap Save.

  1. Click the appropriate links to download the CA and Android certificate.

    You can pass these files to mobile users who want protection from the IWSaaS Service using a VPN.

  2. From the email sent by the system administrator, import the certificates:
    1. Tap the CA certificate link to import the certificate.
    2. Specify the name tag for the CA certificate.

      Example: IWSaaS Root CA.

      Specify a certificate name for the CA 

    3. Tap the mobile certificate link to import the certificate.

      When prompted, specify "trendmicro" as the password to extract the certificate.

      Type the password to extract the certificate 

    4. Specify the name tag for the mobile certificate, such as “IWSaaS Mobile”.

      Specify a name for the mobile certificate

       
  3. To view your certificates, go to Settings > Security > Trusted Credentials.

    The System tab is displayed by default.

    Go to Settings > VPN > IWSaaS Mobile 

  4. Tap the User tab.

    The CA certificate you installed appears.

    Tap the User tab 

  5. To configure the Android VPN profile, select Settings > Wireless & Networks > More Settings > VPN.

    Select Settings > Wireless & Networks > More Settings > VPN 

    Set up VPN

     
  6. Choose basic VPN between basic or advance VPN.
  7. Enter the details of the VPN profile. Take note to the following:
    • Enter the profile name (Example: IWSaaS VPN Service) in the Name field. This can be any ASCII string that describes your profile.
    • Change the default Type field from "PPTP" to "IPSec XAuth RSA".
    • In the Server Address field, enter the VPN service name “vpn.iws.trendmicro.com”.
    • Select the client certificate (Example: IWSaaS Mobile) that you just installed on the IPSec user certificate field.

      Edit your VPN profile 

  8. Click Save.
  9. From the list of configured VPN profiles, tap and hold on the profile name.
  10. Enter your IWSaaS account information in the User name and Passwordfields.

    Enter your IWSaaS account username and password

    You can save the information to avoid entering it for each session of IWSaaS VPN.

Premium
Internal
Rating:
Category:
Deploy; Install
Solution Id:
1095665
Feedback
Did this article help you?

Thank you for your feedback!

To help us improve the quality of this article, please leave your email here so we can clarify further your feedback, if neccessary:
We will not send you spam or share your email address.

*This form is automated system. General questions, technical, sales, and product-related issues submitted through this form will not be answered.

If you need additional help, you may try to contact the support team. Contact Support


To help us improve the quality of this article, please leave your email here so we can clarify further your feedback, if neccessary:
We will not send you spam or share your email address.

*This form is automated system. General questions, technical, sales, and product-related issues submitted through this form will not be answered.


Need More Help?

Create a technical support case if you need further support.