Troubleshooting and Testing MobileIron

You are here:
< Back

Here is a list of problems and the solutions I have experienced while working with MobileIron.

Question / Problem:

Can a Sentry be added to multiple VSPs?

Answer / Solution:

Under no circumstances should a Sentry be added to multiple VSPs.  This will cause all types of problems including but not limited to; failure to retire devices, failure to remove the Sentry configuration from the VSP (persists / returns after a reboot), among other unwanted behaviors.  This is not the same as adding multiple Sentries to a single VSP.  Please see this section for details.

Question / Problem:

Can multiple Sentries be added to a VSP?

Answer / Solution:

Yes, this is actually recommended best practice in a number of scenarios where an ActiveSync Sentry is needed as well as a tunneling Sentry.  Simply configure a new Sentry instance for each required appliance under the VSP “Sentries” section and verify connectivity between the VSP and the Sentries.

Question / Problem:

I would like a way to remove all the devices associated with accounts that are disabled in Active Directory.  Is there a way to accomplish this efficently?

Answer / Solution:

Leveraging the Assemble Utility provided by MobileIron, the following rule can be setup that will search all devices and if the user account associated with the device is disabled in Active Directory, the device will be retired.

[RuleNum]
numberofrules=1
sleeptime=250
delimeter=,
ad_data=yes

[Rule1]
NumberofElements=1
Action=retire

Element1_trigger=ad:disabled
Element1_description=AD account disabled

 

 

Last Updated On October 24, 2017