Astra App Introduction and Installation
Overview
The Astra app protects and monitors traffic on the mobile devices that install this app. You can also enable email leakage detection in Others > Settings > Email Leak Service to receive an email from the Astra app if your email address was illegally or unknowingly used to access certain websites; see Astra App Menus Overview for more information.
Astra Network Overview
You can create an account on the Astra app as an admin or as a member.
You can invite members to join your Astra app account as an admin. A member is the person’s mobile device you wish to monitor. You can see a summary of data usage and a list of websites accessed for yours and your members’ mobile devices.
A member account allows you to monitor traffic on your mobile device only, such as access counts to which websites, and access attempts blocked by which websites. You can also see a summary of data usage and a list of websites accessed by your mobile device.
The Astra app supports the operating systems listed below:
• Android 7.0 or later
• iOS 12.0 or later
Astra Licenses
At the time of writing, the Astra app supports the First Defense license. This license includes the security services listed below:
Content Filtering and URL Blocking
Content filtering blocks web pages that belong to specific categories, such as alcohol or entertainment, by inspecting the web pages that members are visiting.
URL blocking blocks packets that come from the listed addresses in your websites block list regardless of your content filter settings.
IP Reputation
IP reputation checks the reputation of an IP address from a database. An IP address with bad reputation associates with suspicious activities, such as spam, virus, and/or phishing. The Astra app will block packets that come from an IPv4 address with bad reputation.
URL Threat Filtering
URL filtering compares access to specific URLs against a database of blocked or allowed sites. Sites on the database are sorted into categories such as:
• Anonymizers
• Browser Exploits
• Malicious Downloads
• Malicious Sites
• Phishing
• Spam URLs
• Spyware Adware Keyloggers
Email Leak Service
The Astra app can detect and send an email if your email address was used by hackers to access forbidden websites.
To configure content filter profiles and URL block/allow lists, you need to go to the Astra portal at https://console.astra.cloud.zyxel.com. See the Astra web portal online help at http://www.zyxel.com/web-help-compact/AstraPortal/index.html for more information.VPN
The Astra cloud connects to your mobile device through a VPN tunnel to bypass any intermediary firewalls. You need to enable VPN in Settings > Connections > More connection settings on your mobile device to use the Astra app.
A key icon (
) should appear on the top panel of your mobile device. You can also to Settings > Connections > More connection settings on your mobile device to make sure the Zyxel Astra VPN profile is created.
) should appear on the top panel of your mobile device. You can also to Settings > Connections > More connection settings on your mobile device to make sure the Zyxel Astra VPN profile is created.
Astra App Installation
Follow the steps below to log in as an admin or as a member. See Overview for more information on differences between an admin and a member.
Member Login
1 Install the Astra app from Google Play or Apple App Store.
2 You will receive an email invitation to join the Astra app. The email includes a temporary password.
3 Copy the temporary password in the invitation email. Click the hyperlink in the email and use this password log into the Astra app for the first time.
The temporary password is only valid for 7 days. 
4 Follow the prompts to change your password. Your password must be at least 7 characters long, including a lower case letter, an upper case letter and a number. Special characters are allowed. Spaces and double-byte characters are not allowed.
5 Tap Member Login and log in with your new password and email.
Only two mobile devices can use the same account to log into the Astra app at a time. If you want to log in on a third mobile device, you need to contact your admin to remove one of your mobile device first.6 Tap OK to enable VPN on your mobile device when you see the Connection request pop-up message.
7 Tap Acknowledge in the Astra Term of Use screen to go to the Astra app Home screen.
Admin Login
1 Install the Astra app from Google Play or Apple App Store.
2 Tap Admin Login to log in as an admin.
3 Enter your myZyxel account email and password to log in. Create a myZyxel account if you don’t already have one; see Create a myZyxel Account for more information.
4 Tap OK to enable VPN on your mobile device when you see the Connection request pop-up message.
5 Tap Agree to provide your email address and your name to use Astra.
6 Tap Go to Settings to go to your mobile device settings screen.
7 Find the Astra app and slide the switch to the right to allow Astra to access traffic through your device in order to identify potential threats.
8 Tap Acknowledge in the Astra Term of Use screen to go to the Astra app Overview screen.
Astra App Menus Overview
The menus you see in the Astra app will be different depending on if you log in as an admin or as a member; see Overview for more information.
Member Account Menus
The member account menus include:
• Home
• Others
Member Account Menus Overview
The following table describes each menu item.
icon | menu | description |
|---|---|---|
 | Home | Use this screen to view detailed information on your mobile device activities and the amount of traffic the Astra app has processed and scanned. |
 | Others | Use this screen to: • View the help on using the Astra app. • View websites and IP addresses that have been blocked. • Send feedback. • Enable or disable Email Leak Service and Astra Service. |
Admin Account Menus
The admin account menus include:
• Overview
• Home
• License & Members
• Others
Admin Account Menus Overview
The following table describes each menu item.
icon | menu | description |
|---|---|---|
 | Overview | Use this screen to view a summary of members activities, such as websites and IP addresses accessed by your members and data usage. |
| Home | Use this screen to view detailed information on members activities and the amount of traffic the Astra app has processed and scanned. |
 | License & Members | Use this screen to: • View members information. • Invite members. • Manage members. |
| Others | Use this screen to: • View the help on using the Astra app. • View websites and IP addresses that have been blocked. • Send feedback. • Enable or disable Email Leak Service and Astra Service. • Log out of the Astra app. |
Create a myZyxel Account
myZyxel is Zyxel’s online service center where you can manage your license. Follow the steps below to create a myZyxel account.
1 Tap Create Account to go to the Create an Account screen.
2 Enter your name and am email address.
3 You will receive an activation email. Click the link in the email to activate your Astra account and set a password.
Enable Two Factor Authentication
Use two factor authentication to have double-layer security for your Astra account. The first layer is your Astra account login email and password. The second layer is Google Authenticator or authorized email address. Follow the prompts to enable two factor authentication after you’ve created your Astra app account.
Google Authenticator
You need to install Google Authenticator from Google Play or Apple App Store if you want to use Google Authenticator as your second factor authentication.
1 Tap Enable Now to enable two factor authentication.
2 Select Google Authenticator.
3 Take a screenshot of the QR code in Step 2, then send it to your email address. Go to the email inbox to which you sent the QR code, open the QR code screenshot on your computer.
4 Open Google Authenticator. Tap the plus icon, then tap Scan Barcode to scan the QR code on your computer. You will see the myZyxel field with a six-digit code.
5 Enter the six-digital code in the myZyxel field under Step 3.
6 Tap Verify to go to the next screen.
7 Tap Confirm & Sign In to go to the login screen. Enter your account email and password to log in.
You will need to check the six-digital code generated in Google Authenticator and enter that code in the Astra app every time you log in. You can log into the Astra app on other mobile devices by using these one-time passwords generated by Google Authenticator.
Authorized Email Address
1 Tap Enable Now to enable two factor authentication to secure your account.
2 Select Email Verification. The Astra app will send an authorization email to the email address you use to create your Astra app account.
3 Check the authorization email. Go to the Astra app and enter the six-digital code in the email.
4 Tap Verify to go to the next screen.
5 Enter an email address as your backup email address. You can receive the authorization email with this email address if your primary email is not accessible.
