Deploy Cato SDP Client with Intune (Windows)

In this guide, we’ll walkthrough how to configure Microsoft Intune from scratch and use it to deploy the Cato SDP client for Windows.

What is Intune?

Microsoft Intune is a cloud-based service that focuses on mobile device management (MDM) and mobile application management (MAM).

With Intune, you can:

Set rules and configure settings on personal and organization-owned devices to access data and networks
Deploy and authenticate apps on devices – on-premises and mobile
Be sure devices and apps are compliant with your security requirements

In order to access Intune, you need to have either a Microsoft 365 or Enterprise & Mobility E3/E5 subscription. If you’re using a free Azure account, you’ll need to sign up to a trial, or pay per user (which can get costly).

For more information, see the Microsoft documentation.

Before you Begin

When adding an app to Intune, you’ll be prompted to allocate the groups of users (or devices) that the app will be rolled out to. Hence before beginning, ensure you have the users of Cato inside of an AD or Azure AD group that you can assign the Cato SDP Client app to.

Depending on whether you want the Cato SDP client app to be mandatory or optional for certain groups of users, you may want to divide your users into two groups:

The users to which the app is MANDATORY. Any user in this group will have the app automatically pushed out to them.
The users to which the app is OPTIONAL. The app will not be automatically pushed for users in this group, allowing them to go to the Company Portal and download it themselves if they choose.

Microsoft Intune Admin Center

We’ll be using the Microsoft Intune Admin Center to orchestrate Intune. You can log in using the same Azure Portal credentials here: https://endpoint.microsoft.com.

Deploying the SDP Client

To deploy the SDP Client using the MEM, complete the following three steps:

Add a new Line-of-Business App
Customize the App details
Assign users to the App

Add a new Line-of-Business App

Add the Client to the MEM portal.

To add a new Line-of-Business App:

In the Apps menu, navigate to Apps > All Apps.
Click Add.

The Select app type panel opens.
In the panel, under the Other heading, select Line-of-business app and click Select.
Upload the MSI file for the Cato SDP Client. For more information, see Downloading the Cato Client
Click OK.

Customize the App Details

Customize the app details in the MEM portal.

To customize the app details:

On the Add App screen, under the App information tab, enter the following details:
- Name: Cato SDP Client
- Description: Cato Client
- Publisher: Cato Networks
- Ignore App Version: Select No
- Category (Optional): Select an app category to allocate to the Cato SDP Client

Assign Users to the App

Depending on how you want the app rolled out to users, there are two different sections you can allocate users or groups to:

Required: The app is MANDATORY for these users/groups. Any user or group in this section will have the App automatically pushed out to them
Available for enrolled devices: The app is OPTIONAL for these users/groups. The app will not be automatically pushed, and the users can go to download the app themselves from within the Company Portal

To assign users to the app:

In the Microsoft Intune admin center, navigate to Apps > All Apps > Cato SDP Client > Properties > Assignments
Assign your users or groups to the Cato SDP client app as required.
Click Next
On the Review + Create screen, click Create.

Your Line-of-Business application is created and the MSI file upload.

Note: Wait until the MSI file upload is complete before closing the MEM.