Deledao Cloud Proxy Deployment for iPads


Mosyle MDM — Step-by-Step Deployment Guide


This guide walks through deploying the Deledao Cloud Proxy to managed iPads using Mosyle. Complete the steps in the order shown — push the certificate before the PAC URL.


Before you begin

  • Have access to both the Mosyle console and the Deledao Admin Console.
  • Identify a single test iPad to validate each profile before rolling out to the full fleet.

Step 1 — Push the Certificate

Deploy the certificate through Mosyle's Custom Profiles / Certificates section.

  1. In the Mosyle console, click the Management tab at the bottom.
  2. At the top left where it says Manage macOS, change macOS to iPad.
  3. Go to Certificates / Custom Profiles and add a new profile.
  4. Download the certificate from: https://cdn.deledao.net/download/proxy/cert/deledao.com.cer
  5. Back in Mosyle, click Select the file on the right and choose the certificate that was just downloaded.
  6. Push it to a test device first by clicking + Add assignment.
  7. Scroll down and click Save.

Step 2 — Push the PAC URL (Web Filter)

Deploy the Deledao PAC URL through Mosyle's Web Filter as a Global Proxy profile.

  1. In the left-hand column, click Web Filter, then click Add new profile.
  2. Name the profile Deledao.
  3. Click Type and select Global Proxy.
  4. Change Proxy Authentication from Manual to Automatic.
  5. Get the PAC URL by contacting Deledao support: let us know which MDM you are using (Mosyle) and we will provide the PAC URL for you.
  6. Back in Mosyle, paste the URL into the URL text box.
  7. Handling the %Email% variable: The PAC URL relies on the Mosyle %Email% variable. For this to work, devices must be assigned to users in Mosyle, and each user must have an email associated with their account. Leave the %Email% variable in place so Mosyle substitutes each assigned user's email.
  8. Check both of these boxes:
  • Allow bypassing proxy when PAC fails
  • Allow bypassing proxy to access captive networks

    9. Scroll to Application time and select Fulltime (24x7).

    10. Under Select Location Type, choose the test device to push this profile to it first.

    11. Click Save.

    12. Back in the Deledao Admin Console, go to Deployment > Windows and Mac and scroll down to confirm mosyle.io and mosyle.com are in the domain bypass list.

Verification (Test iPad)

Confirm the deployment worked on the test iPad before rolling out to the rest of the fleet. These steps are performed on the iPad itself.

  1. On the iPad, open Settings > General > VPN & Device Management and open the Mosyle profile.
  2. Open Restrictions at the bottom, then the Global HTTP Proxy field. Confirm Deledao appears, along with the email entered through Mosyle.
  3. Open Safari on the iPad and go to google.com.
  4. Search for pacman. If the filter blocks the page, the deployment was successful.
  5. Once verified, push the profile out to the remaining iPads.

Rollout order: When deploying to the rest of the fleet, push the certificate out before the PAC URL.