整合 Check Point SandBlast Mobile 與 IntuneIntegrate Check Point SandBlast Mobile with Intune

開始之前Before you begin

注意

您需要在 Check Point SandBlast Mobile MTD 主控台 中執行下列步驟。The steps below need to be taken in the Check Point SandBlast Mobile MTD console.

開始整合 Check Point SandBlast Mobile 與 Intune 之前,請確定您有下列項目:Before starting the process of integrating Check Point SandBlast Mobile with Intune, make sure you have the following:

  • Microsoft Intune 訂閱Microsoft Intune subscription

  • 可授與下列權限的 Azure Active Directory 管理員認證:Azure Active Directory admin credentials to grant the following permissions:

    • 登入及讀取使用者設定檔Sign in and read user profile

    • 以登入的使用者身分存取目錄Access the directory as the signed-in user

    • 讀取目錄資料Read directory data

    • 將裝置資訊傳送至 IntuneSend device information to Intune

  • 可存取 Check Point SandBlast Mobile MTD 主控台的管理員認證。Admin credentials to access Check Point SandBlast Mobile MTD console.

Check Point SandBlast 應用程式授權Check Point SandBlast app authorization

Check Point SandBlast 應用程式授權程序是由下列項目所組成:The Check Point SandBlast app authorization process consists of the following:

  • 允許 Check Point SandBlast Mobile 將裝置健全狀況狀態的相關資訊傳送回 Intune。Allow the Check Point SandBlast Mobile service to communicate information related to device health state back to Intune.

  • 同步處理 CheckPoint SandBlast Mobile 和 Azure AD 註冊群組成員資格,以填入其裝置上的資料庫。CheckPoint SandBlast Mobile syncs with Azure AD Enrollment Group membership to populate its device’s database.

  • 允許 Check Point SandBlast 管理員主控台使用 Azure AD 單一登入 (SSO)。Allow Check Point SandBlast admin console to use Azure AD Single Sign On (SSO).

  • 允許 Check Point SandBlast 行動應用程式使用 Azure AD SSO 登入。Allow the Check Point SandBlast Mobile app to sign in using Azure AD SSO.

設定 Check Point SandBlast Mobile 整合To set up Check Point SandBlast Mobile integration

  1. 移至 Check Point SandBlast Mobile MTD 主控台,以您的認證登入。Go to Check Point SandBlast Mobile MTD console and sign in with your credentials.

  2. 按一下 [設定] 索引標籤。Click on the Settings tab.

  3. 依序選擇 [裝置管理] 和 [設定]。Choose Device management, then Settings.

  4. MDM Service 下拉式清單中選擇 [Microsoft Intune]。Choose Microsoft Intune from the MDM Service drop-down list.

  5. 一旦將 Microsoft Intune 設為 MDM 服務,[Microsoft Intune 設定] 視窗就會出現,選擇 Add to my organization 接受每個裝置平台:iOS、 Android 和 Windows 授權 Check Point SandBlast Mobile 與 Intune 和 Azure AD 進行通訊。Once you set Microsoft Intune as the MDM Service, the Microsoft Intune Configuration window pops up, choose the Add to my organization for each device platform: iOS, Android and Windows to authorize Check Point SandBlast Mobile to communicate with Intune and Azure AD.

    Check Point MTD Intune 設定

    重要

    您必須新增所有裝置平台,才能繼續下一個步驟。You must add all device platforms to proceed to the next step.

  6. 選擇 [接受] 授權 Check Point SandBlast Mobile 應用程式與 Intune 和 Azure Active Directory 進行通訊。Choose Accept to authorize the Check Point SandBlast Mobile app to communicate with Intune and Azure Active Directory.

  7. 一旦啟用了所有裝置平台,就需要進入 Azure AD 安全性群組。Once you enabled all device platforms, you need to enter the Azure AD security group.

  8. 選擇 [驗證],一旦成功驗證 Azure AD 安全性群組,即選擇 [儲存]。Choose Verify, once the Azure AD security group is successfully verified, choose Save.

後續步驟Next steps

若要提交意見反應,請前往 Intune Feedback