XenMobile

Connection scheduling device policy

Important:

Citrix recommends that you use Firebase Cloud Messaging (FCM) to control connections from Android, Android Enterprise, and Chrome OS devices to XenMobile Server. For information on using FCM, seeFirebase Cloud Messaging.

If you choose to not use FCM, you can create connection scheduling policies to control how and when user devices connect to XenMobile Server.

You can specify that users connect their devices manually or that devices connect within a defined time frame.

To add or configure this policy, go toConfigure > Device Policies. For more information, seeDevice policies.

Platform settings

  • Require devices to connect:Click the option you want to set for this schedule.
    • Always:Keep the connection alive permanently. XenMobile on the user’s device attempts to reconnect to the XenMobile server after a network connection loss and will monitor the connection by transmitting control packets at regular intervals. Citrix recommends this option for optimized security. When you chooseAlways, also use for the deviceTunnel Policy,Define connection time-outsetting to ensure the connection is not draining battery. By keeping the connection alive, you can push security commands like wipe or lock to the device on-demand. You must also select theDeployment ScheduleoptionDeploy for always-on connectionsin each policy deployed to the device.
    • Never:Connect manually. Users must initiate the connection from XenMobile on their devices. Citrix doesn’t recommend this option for production deployments because it prevents you from deploying security policies to devices, thus users will never receive any new apps or policies.
    • Every:Connect at the designated interval. When this option is in effect and you send a security policy such as a lock or a wipe, XenMobile processes the action on the device the next time the device connects. When you select this option, theConnect every N minutesfield appears where you must enter the number of minutes after which the device must reconnect. The default is20.
    • Define schedule:When enabled, XenMobile on the user’s device attempts to reconnect to the XenMobile server after a network connection loss and monitors the connection by transmitting control packets at regular intervals within the time frame you define. See Defining a connection time frame, next, for how to define a connection time frame.
      • Maintain permanent connection during these hours:Users’ devices must be connected for the defined time frame.
      • Require a connection within each of these ranges:Users’ devices must be connected at least once in any of the defined time frames.
      • Use local device time rather than UTC:Synchronize the defined time frames to local device time rather than Coordinated Universal Time (UTC).

Defining a connection time frame

When you enable the following options, a timeline appears where you can define the time frames you want. You can enable either or both options to require a permanent connection during specific hours or to require a connection within certain time frames. Each square in the timeline is 30 minutes, so if you want a connection between 8:00 AM and 9:00 AM every weekday, you click the two squares on the timeline between 8 AM and 9 AM every weekday.

For example, the two timelines in the following figure require a permanent connection between 8:00 AM and 9:00 AM every weekday, a permanent connection between 12:00 AM Saturday and 1:00 AM Sunday, and at least one connection every weekday between 5:00 AM and 8:00 AM or between 10:00 AM and 11:00 PM.

Image of Device Policies configuration screen

Connection scheduling device policy