Sophos Mobile Control SophSkills Session
description
Transcript of Sophos Mobile Control SophSkills Session
Sophos Mobile Control SophSkills Session
Name: Thomas Lippert – Product Management DPG
Date: 17-Feb-2011
2
Market DriversMore and more corporate users use a smartphone
Smartphones have become small computers with strong general capabilities
Smartphones are used far beyond the usual PIM functionality
E-Mail access
Corporate application platform
Access to internal information
Smartphones are a new threat vector
3
New Risks from Smartphone useDevice lossDevice theftConsumer oriented designPoor governance
Inadequate management
Corporate information accessLarge storage capability
Fast wireless speed
4
Sophos Mobile ControlA Mobile Device Management (MDM) solution to provide:
Configuration of the phone incl. all security related settings
Ability to address concerns regarding loss/theft
Ability to support employees’ personal devices (consumerization)
Low IT management costs through self service portal
iPhone Android Win Mobile
Broad mobile platform support
5
High Level Functionality MatrixiPhone/iPAD Android Win Mobile 6.x
Loss/Theft Protection Y Y Y
Remote Configuration Y (Y)* Y
Controlled E-Mail Access Y Y Y
Self Service Portal Y Y Y
Device Status Reporting Y Y Y
* Additional Android functionality will be added with the next versions
6
Functionality – Loss/Theft ProtectionFeature
Remote Lock and/or Wipe
Auto-wipe after a number of failed login attempts
SIM Change Notification
Supported Platforms
Apple iPhone
Google Android
Windows Mobile 6.x
7
Functionality – Remote Device ConfigurationFeature
Define password policy and lock period
Install, list and deinstall of apps
Blocking the use of camera, browser, Youtube, …
Other platform specific settings
Supported Platforms
Apple iPhone
(Google Android)
Windows Mobile 6.x
8
Functionality – Controlled E-Mail AccessFeature
Distribution of the Exchange or E-Mail server settings
Mail access controlled via EAS Proxy
Supported Platforms
Apple iPhone
Google Android
Windows Mobile 6.x
9
Functionality – Self Service PortalFeature
Enabled user can register their phones in a self service portal
No administrator involvement required
E-Mail access only enabled after self-enrolement
User can lock and wipe their phones via the portal
Supported Platforms
Apple iPhone
Google Android
Windows Mobile 6.x
10
Functionality – Device Status ReportingFeature
Device status view in the Admin GUI
Flexible grouping, filtering and exporting of the device list
Collection of device properties like memory usage, battery level, IMSI, roaming mode, OS version, …
Supported Platforms
Apple iPhone
Google Android (partly)
Windows Mobile 6.x
11
Mobile Device Client AppsSMC client apps on Android and Windows Mobile
Distributed over-the-air from SMC server
Autostart at device boot
Minimal user interaction (non intrusive)
Apple iPhone and iPad are controlledwith the build-in management client
12
Screenshot – Admin Interface
13
Questions?