Onboard a User to the Skyhigh Client

Prerequisite

• Skyhigh Client 5.0.0.x
   

To onboard a user to the Skyhigh Client, go to Policy > Skyhigh Client > Policy.

The setup of the Skyhigh Client comprises two steps: 

1. Create a New Skyhigh Client Policy and Download the Client Bundle
2. Apply Policy to the New Skyhigh Client

Create a New Skyhigh Client Policy and Download the Client Bundle

To create a new Skyhigh Client policy and download the Client Bundle:

1. On the Skyhigh Client page, click Get Started.
2. On the Skyhigh Client Policy and Configuration window, perform the following configurations:
   1. Tenant Authentication
      Skyhigh Client uses the tenant credentials to communicate securely with the Skyhigh SSE. Credentials consist of a Customer ID and a Shared Secret.
      In the Enter Tenant Credentials section, enter the following:
      1. Customer ID. The customer ID is auto-populated.
      2. Shared Secret. Enter the shared secret. The shared secret is the password that secures communication between the Skyhigh Client and the Skyhigh SSE. 

3. Confirm Shared Secret. Re-enter the shared secret.
4. Click Next.
   
   

 

2. Gateway
   
   Gateways are crucial as they serve as exit points for directing web, non-web, and private application traffic from endpoints to appropriate destinations.
   The Gateway section in Client UI enables you to define a list of Skyhigh Secure Web Gateways present on-premises or on the cloud. Gateways for Cloud Firewall are determined internally by Skyhigh Client.
   
   In the Gateway section, enter the following:
   1. Gateway Name. Enter a name for the gateway.
   2. Hostname / IP Address. The Hostname or IP Address includes the Hostname/IP Address and Port Number of the gateway. The default gateway information that connects to Skyhigh SSE is auto-populated.
   3. (Optional) Click Add Host to add an additional host.
   4. Selection Method. Provides flexibility to choose how to prioritize and select hosts for managing outgoing traffic. There are two available methods: First Available and Fastest Response Time.
      • First Available. Connects to the first accessible host from the list of configured hosts. Additionally, this helps to select a specific host from the list of configured hosts to transport the traffic from the endpoints.
      • Fastest Response Time. Connects to the host that has the fastest response time in the list of configured hosts.
      • Automatic Switch Over. The software checks the host list at the specified interval. If an active host with quick response is available from the configured list, the software automatically switches to it. This option is available only when connected via the First Available host selection method.
   5. Click Next.
      
      

3. Policy
   
   The Policy settings enable you to define a name for the default Skyhigh Client Policy. Policy will have a preset collection of rules that enable traffic redirection from endpoints using a default client profile.
   
   In the Enter Default Policy Name section, enter the following:

   1. Policy Name. Enter the policy name.

2. Click Publish & Next.

4. Download Skyhigh Client

   1. After completing Tenant Authentication, Gateway Setup, and Policy Configuration, click Download Skyhigh Client.
   2. Under the Publish Policy & Download Client Bundle section, select an applicable operating system.
   3. Click Publish and Download.

The Skyhigh Client Bundle is downloaded. A Client Bundle is a compressed archive containing a Skyhigh Client policy and Skyhigh installer for a specific operating system. 

4. On the Download Skyhigh Client Bundle window, in the What you can do next section, perform the steps to install, run, and view the Skyhigh Client application.
5. Click Done.
   
   

You are successfully onboarded. The new policy appears under the policy tree of the SC Policy dashboard. You must configure the new policy to suit your requirements by referring to the Configure the Skyhigh Client Policy section.

Apply Policy to the New Skyhigh Client

The downloaded Skyhigh Client Bundle contains the new Skyhigh Client policy (OPG file) and the Client installer. Deploy them to the endpoints using applicable deployment methods.