Project Settings Node

The Project Settings node gives you the ability to edit global settings for Ion configurations that will be applied to all Profiles. These settings encompass features such as the Listener Service Port, Splash Screen and Cache Clearing behavior, and generic security and network behaviors.

Listener Service Port — Port used by the Controller on the local machine. During startup, the Controller will check to see if the specified port is available. If that port is not available, the Controller will automatically increment the port value by 1 until an available port is identified. The default port value is 8877.

Show Splash Screen on Start — By default, Ion disables showing the splash screen (Ion graphic with the product name and version number) on client systems when the Controller is started. This option can be enabled during project configuration. The splash screen is only displayed at startup (usually set to user login) so users should not regularly see this display.

Clear Cache on Start — By default, Ion will clear the Internet Explorer cache when the Controller starts and detects a configuration change since the last time it started. This is done to ensure proper rendering and eliminate any potential of older/stale files from being loaded via the system cache versus being obtained from the server. When files are loaded from the local system cache, Ion may be unable to properly manage the web application and cannot ensure configurations will work as expected.

Block Unmanaged Java — Internet Explorer allows the default version of Java installed on the PC to be invoked by any website containing a Java applet. Setting Block Unmanaged Java to Enabled uses Oracle DRS to block Java globally for all websites unless specifically allowed in an Ion Profile (limited or full) and associated rule.

Use Custom Java Deployment Ruleset — Allows the creating and editing of a custom Java deployment ruleset XML file, per Oracle’s Deployment Ruleset (DRS) specification. Enabling this option will add a Custom Java Deployment Ruleset field to Project Settings, and preclude the use of the Block Unmanaged Java option and Global Java Profiles (as both are controlled from the single DRS file created by this setting). When ‘Use Custom Deployment Ruleset’ is enabled, ‘Block Unmanaged Java’ is disabled and grayed out, and Global Java Profiles do not appear in the list of rendering modes when creating a new Profile.

\

Invalid Certificate Handling — When presented with invalid HTTPS Certificates, Internet Explorer 6 did not generally warn users or prevent navigations. HTTPS Certificate handling behavior has become more secure in recent versions of Internet Explorer, such that invalid HTTPS Certificates will trigger blocked navigation, user prompts or related behaviors that prevent web applications from functioning as they did previously. Ion provides the ability to manage how invalid HTTPS Certificates are handled. Available options are:

• Reject All: Rejects all invalid HTTPS Certificates and navigation is cancelled.

• Accept All (Default): Accept all invalid HTTPS Certificates and continue with navigation.

Project Update Activation — Project Update Activation enables new Ion configurations to be loaded on the fly without restarting Browsium Controller (which typically requires a reboot or logoff/logon of the client computer). The field can be set to load the new configuration immediately, at a scheduled time, or upon next Controller restart (the default).

All Ion-managed instances of Internet Explorer and Edge Internet Explorer Mode will be closed automatically when the new configuration is loaded. Careful planning is recommended when choosing non-default options so users working in Internet Explorer or Edge Internet Explorer Mode are not interrupted by an Ion configuration deployment.

Custom Ion Preferences — This section is used to add features or product behaviors that may be needed by customers for unique and specific browser or web application settings. Ion provides the ability to control sub-component behaviors through these preference options. Customers running older or custom developed web applications may need the ability to control Ion to respond in non-standard ways for specific and defined scenarios.

For example, an organization may have an application that is designed to force users to present login credentials rather than use their current login user information. Ion is designed to work only using the integrated Windows user credentials, as controlled by Internet Explorer settings. In this case a custom Ion preference could be used to change the default Ion behavior rather than modifying global IE settings that may impact other applications where the logged in user credentials are preferred.[]{#_Tools .anchor}

The following Custom Ion Preferences are supported in this release.

+------------------------------------------+-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ | Custom Ion Preference | Description | +==========================================+===================================================================================================================================================================================================================================================================================================================================================================================================================================================================================================================================================================+ | IgnoreRule.x = Url\ | IgnoreRule provides a way for a certain URLs to continue navigating within the same context as the referring website. In other words, URLs matching ignore rules will continue to navigate in the native instance of Internet Explorer if they are invoked from the native instance and will continue to navigate in an Ion-managed instance of Internet Explorer if invoked from an Ion-managed instance.\ | | (where ‘x’ is an integer ≥ 1) | \ | | | This flag is typically added for authentication servers that may be serving both Ion-managed and unmanaged web applications. For example, login.live.com is the authentication server used by all Microsoft properties from OneDrive to Outlook to Bing. If you want to load OneDrive in an Ion-managed instance but want to leave Outlook and Bing in native instances, you will add an Ignore rule for login.live.com (IgnoreRule.1 = login.live.com) so that it can be navigated in both managed and native contexts. Regex match is used to match the string. | +------------------------------------------+-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ | Config.oHeaderEncoding | Config.oHeaderEncoding explicitly sets the header encoding to use on HTTP responses from the server. This flag is only needed to work around problems created by incorrect encoding settings on an HTTP web server.\ | | | \ | | | This is a very advanced property and should only be used with direct guidance from the Browsium support team. | +------------------------------------------+-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ | ion.TurnOnIEContextMenu\ | False by default. Set to true to enable the use of a context menu when right-clicking on managed instances of Internet Explorer. When clicked, a dialog will appear which shows detailed information about the Profile being used. See example in next section. | | = True | | +------------------------------------------+-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ | ion.SwapDefaultCACertsOnly = False | True by default. Set to false to insert required certificates into the certificate store of all installations of Java on this system rather than solely default installations. This flag should only be set in certain circumstances where customized installations of Java or existing Java installer bugs cause issues setting up Java remediations and can cause a performance impact when opening a managed instance of Internet Explorer on older machines. | +------------------------------------------+-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ | ion.turnoffautofilljavasettings = True | False by default. When set to true this flag disables automated adding of deployment.properties custom file swap for requested java version. | | | | | | Enable this flag only when you need to use system deployment.properties configuration. | +------------------------------------------+-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ | Ion.IEAddonDetectRedirects\ | When this flag is set, Internet Explorer will detect 30x redirection (typically a 302 redirect) and evaluates rules on the redirected URL. By default, 30x redirected URLs are ignored. | | = True | | +------------------------------------------+-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ | Ion.disablecve202144228protection = True | False by default. Set this value to true to disable (remove) protection against log4shell in Java based applications loaded in Ion Profiles. | +------------------------------------------+-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ | Ion.InvocationArgs = (Arguments) | This advanced profile setting allows custom arguments to be set for the managed Internet Explorer or Edge IE Mode instance. This will allow Ion-managed Internet Explorer or Edge IE Mode instances to launch with custom behavior. Please note that setting certain command line arguments may cause Ion to not run correctly for the specified profile. | | | | | | When in use, please set the profile browser platform to either Internet Explorer or Edge IE Mode for consistent results as Internet Explorer and Edge (Chromium) both take different sets of command line arguments. | +------------------------------------------+-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+

Cookie Sharing Domain management

Some organizations may require cookie sharing to facilitate a smoother end user experience when switching between browsers or between browsers and Edge IE Mode. Setting Ion.CookieSharingDomain.x = (Domain), where’x’ is an integer >= 1, for an Ion profile will ensure that the Ion profile inherits cookies of the specified domain from the default Edge (Chromium) browser profile. Up to 99 domains per profile can be specified.

This flag can be used to ensure applications which depend on technologies such as Single Sign On (SSO) can be authenticated in Edge but still be launched in an authenticated state in Internet Explorer or Edge IE Mode.

Internet Explorer Context Menu

Setting the Ion Custom Preference ion.TurnOnIEContextMenu = True adds an entry labeled “Managed by Ion …” to the Edge IE Mode right-click context menu. This entry will appear in all Ion-managed Internet Explorer and Edge Internet Explorer Mode windows, which are controlled by a full Ion Profile. Selecting “Managed by Ion …” will open a window validating the Ion settings, including the Browsium Client version number, the name of the Ion Profile, the document mode set by the Profile, and the user agent string set by the Profile.

This information is very useful during project development and when providing remote helpdesk support for end users who may need to report whether an Ion Profile is properly controlling the web application they’re using.

This feature is disabled by default. It can be turned on for any project that uses a full Ion Profile. However, it may add additional processing overhead to Profiles that don’t already have custom file or custom registry entries.