How Enrollment Check Works - Before
• Device Joins the SSID and is placed in Walled Garden
› Able To Reach DHCP, DNS services + MDM server and Apple Notification Servers
• AP Identifies the OS via DHCP Options
› If not iOS device, released from Walled Garden
› If iOS device, AP queries the MDM server whether device is enrolled
• Enrolled Devices Released From Walled Garden
• Un-enrolled iOS devices remain quarantined. All HTTP requests forwarded to MDM server Enrollment Web Page
How Enrollment Check Works - After
• Once AP verifies enrollment is complete, walled garden opens
› Network access now dictated by rules of relevant User Profile
» Relevance based on User, Location, Device Type, Time, etc.
Configure SSID for MDM Enrollment
• Create SSID
• Expand Advanced
• Enable MDM Enrollment
• Create new MDM policy
Resources
› Solution Brief - http://www.aerohive.com/pdfs/Aerohive-Solution_Brief-JAMF.pdf
› Video Demo - http://www.youtube.com/watch?v=Xcgn55rw7OM
