Description

ConcealBrowse now offers the ability to deploy the extension in Unenforced Mode, giving admins the ability to test the extension in the environment without impacting the users, while still gathering the data from the extension interventions. This is beneficial to see how the extension will behave in your environment and gathering necessary data without impacting users. This guide will outline how to deploy in unenforced mode, as well as changing existing deployments from protected mode to unenforced.

Unenforced Mode - The extension is deployed on the device(s) but there is no user impact. All Intervention details (Isolate, Block, Redirects) will be captured for review in the Conceal dashboard, but protection is not active. 

Protected Mode - The extension is deployed and all interventions(Isolate, Block, Redirects) are enforced on the user/device, and protection is fully active.

Note: Unenforced mode is not currently available for Firefox.

All Users/Devices

Navigate to the Conceal dashboard at https://dashboard.conceal.io/

There are 2 ways to access the deployment mode section in the dashboard:

1. From anywhere on the dashboard you should see Deployment Mode - Protected or Deployment Mode - Unenforced in the top right of the dashboard. You can click this box to be taken to the deployment selection section. This box represents the deployment mode selected for all future deployments.
   
2. On the left hand side click Settings -> Deployment
   
   

Deployment - This is for future deployments and will not affect any existing extensions that have already been deployed. (This is the status that is reflected in step above)

1. To alter the deployment mode, click the dropdown box to select either Protected or Unenforced. Click Apply to ensure changes are saved. Future deployments will be in that selected mode.

Update Existing Deployments - This will affect all currently deployed extensions and their deployment mode. See section below for details on changing the deployment mode for some, but not all deployments.

1. The default setting is None Selected. Select either Protected or Unenforced Mode. This will then show the options for All Devices or All Users.
2. At least one checkbox needs to be checked for All Devices and All Users, you can apply to both as well.
3. Click Apply to ensure changes are saved. All selected existing deployments will be updated.
4. The dropdown box will automatically go back to None Selected.

Devices and Device Profiles

Deployment mode selection for device based deployments and profiles:

1. Select the Devices section on the left-hand side of the dashboard
2. Click the Actions button on the right-hand side. This will give you different options for changing the deployment mode to Unenforced or Protected
   • Set All Devices to Protected - All devices and all profiles will be placed in Protected Mode and interventions will be seen by the end user on the device.
   • Set All Devices to Unenforced - All devices and all profiles will be placed in Unenforced Mode and interventions will not seen by the end user on the device but the data will be gathered in the dashboard.
   • Set Selected Devices to Protected - Only selected devices and their profiles will be changed to Protected Mode.
   • Set Selected Devices to Unenforced - Only selected devices and their profiles will be changed to Protected Mode.
     • To select devices, use the first checkbox column on the devices table.

The Profile Count column will show you the status of the deployment mode and is color coded based on the number of profiles in the Protected/Unenforced mode:

• Green - All profiles on the device are in Protected Mode
• Yellow - Some, but not all profiles are in Protected Mode
• Red - All profiles on the device are in Unenforced Mode

1. Click on View Profiles to drill down to the Profiles on the device.
2. You can toggle the view between table and grid view on the upper right-hand side.
3. You can choose to select the deployment mode on individual profiles as well here in the Extension Mode column. Make your selection then click Apply. To make selections for some or all profiles move onto the next step. 
4. Click the Actions button on the right-hand side. This will give you different options for changing the deployment mode to Unenforced or Protected on some or all profiles within the device.
   • Set All Device Profiles to Protected - All profiles on the device will be placed in Protected Mode.
   • Set All Device Profiles to Unenforced - All profiles on the device will be placed in Unenforced Mode.
   • Set Selected Device Profiles to Protected - Only selected profiles will be changed to Protected Mode.
   • Set Selected Device Profiles to Unenforced - Only selected profiles will be changed to Unenforced Mode.
     • To select specific profiles, use the first checkbox column on the device profiles table.

Users

Deployment mode selection for user based deployments:

1. Select the Users section on the left-hand side of the dashboard. You will see the column Extension Mode which reflects the deployment mode for that user.
2. You can toggle the Deployment Mode of individual users by clicking into the Extension Mode box, making your deployment mode selection, then click Apply. To apply changes to multiple users at once see next steps.
3. Click the Actions button on the right-hand side. This will give you different options for changing the deployment mode to Unenforced or Protected
   • Set All Users to Protected - All users will be placed in Protected Mode and interventions will be seen by the end user on the device.
   • Set All Users to Unenforced - All users will be placed in Unenforced Mode and interventions will be seen by the end user on the device.
   • Set Selected to Protected - Only selected users will be changed to Protected Mode.
   • Set Selected to Unenforced - Only selected users will be changed to Protected Mode.
     • To select Users, use the first checkbox column on the devices table.