Deledao Proxy Deployment for macOS


Mosyle MDM — Step-by-Step Deployment Guide


This guide walks through deploying the Deledao Proxy to managed Macs using Mosyle. Complete the four steps in the order shown below — the sequence matters.


Before you begin

  • Have the tar.gz package we provided via email on hand. It contains the certificate and the .txt file with the bash script.
  • Have access to both the Mosyle console and the Deledao Admin Console.
  • Identify a single test device to validate each profile before rolling out to the full fleet.

Step 1 — Push the PKG (Proxy Agent App)

Deploy the proxy agent PKG to the Macs through Mosyle's policies.

   

    1. Please reach out to support@deledao.com to obtain the the PKG download link.

    2. In the Mosyle console, save the PKG as an app first.

    3. Create a profile for it using the Install PKG option.

    4. Push the profile out to your devices under the Policies tab.


Note: The PKG must be saved as an app before the Install PKG profile can reference it.

Step 2 — Push the Deledao Certificate

Open the tar.gz file we provided via email and deploy the included Deledao certificate through Mosyle's Custom Profiles / Certificates section.

  1. Extract the tar.gz package and locate the Deledao certificate file inside it.
  2. In the Mosyle console, click the Management tab at the bottom.
  3. At the top left where it says Manage macOS, confirm you are targeting the correct platform.
  4. Go to Certificates / Custom Profiles and add a new profile.
  5. Click Select the file on the right and choose the Deledao certificate from the tar.gz package.
  6. Assign it to a test device first by clicking + Add assignment.
  7. Scroll down and click Save.

Important: Always push the certificate out before the PAC URL (Step 4).

Step 3 — Push the Bash Script (Custom Command)

Create a Custom Command profile and paste in the full contents of the bash script from the .txt file inside the tar.gz package.

  1. Open the .txt file from the tar.gz package and copy all of its text.
  2. In Mosyle, create a Custom Commands profile and paste the entire bash script into it.
  3. Set the execution settings to all of the following:
  • Every start up of the Mac
  • Immediately when saving to this device
  • Every user sign-in

    4. Push the script out.

Step 4 — Push the PAC URL (Web Filter)

Finally, deploy the Deledao PAC URL through Mosyle's Web Filter as a Global Proxy profile.

  1. In the Mosyle console, go to Web Filter and click Add new profile.
  2. Name the profile Deledao.
  3. Set Type to Global Proxy.
  4. Change Proxy Authentication from Manual to Automatic.
  5. Get the PAC URL by going to your Deledao admin console > Deployment > Windows and Mac > click on the copy icon next to the blue URL link.
  6. Paste the PAC URL into the Mosyle URL text box.
  7. Check both of these boxes:
  • Allow bypassing proxy when PAC fails
  • Allow bypassing proxy to access captive networks

    8. Under Application time, select Fulltime (24x7).

    9. Under Select Location Type, choose your test device to push this profile to it first.

    10. Click Save.

    11. Back in the Deledao Admin Console, go to Deployment > Windows and Mac and confirm that mosyle.io and mosyle.com are in the domain bypass list.

Verification (Test Device)

Confirm the deployment worked on the test Mac before rolling out to the rest of the fleet.

  1. On the Mac, confirm the Mosyle profile is installed under System Settings > General > Device Management.
  2. Open Safari and go to google.com.
  3. Search for pacman. If the filter blocks the page, the deployment was successful.
  4. Once verified, push the profiles out to the remaining devices.

Rollout order: When deploying to the rest of the fleet, push the certificate out before the PAC URL.