sophos mobile control sophskills session

Sophos Mobile Control SophSkills Session

Name: Thomas Lippert – Product Management DPG

Date: 17-Feb-2011

2

Market DriversMore and more corporate users use a smartphone

Smartphones have become small computers with strong general capabilities

Smartphones are used far beyond the usual PIM functionality

E-Mail access

Corporate application platform

Access to internal information

Smartphones are a new threat vector

3

New Risks from Smartphone useDevice lossDevice theftConsumer oriented designPoor governance

Inadequate management

Corporate information accessLarge storage capability

Fast wireless speed

4

Sophos Mobile ControlA Mobile Device Management (MDM) solution to provide:

Configuration of the phone incl. all security related settings

Ability to address concerns regarding loss/theft

Ability to support employees’ personal devices (consumerization)

Low IT management costs through self service portal

iPhone Android Win Mobile

Broad mobile platform support

5

High Level Functionality MatrixiPhone/iPAD Android Win Mobile 6.x

Loss/Theft Protection Y Y Y

Remote Configuration Y (Y)* Y

Controlled E-Mail Access Y Y Y

Self Service Portal Y Y Y

Device Status Reporting Y Y Y

* Additional Android functionality will be added with the next versions

6

Functionality – Loss/Theft ProtectionFeature

Remote Lock and/or Wipe

Auto-wipe after a number of failed login attempts

SIM Change Notification

Supported Platforms

Apple iPhone

Google Android

Windows Mobile 6.x

7

Functionality – Remote Device ConfigurationFeature

Define password policy and lock period

Install, list and deinstall of apps

Blocking the use of camera, browser, Youtube, …

Other platform specific settings

Supported Platforms

Apple iPhone

(Google Android)

Windows Mobile 6.x

8

Functionality – Controlled E-Mail AccessFeature

Distribution of the Exchange or E-Mail server settings

Mail access controlled via EAS Proxy

Supported Platforms

Apple iPhone

Google Android

Windows Mobile 6.x

9

Functionality – Self Service PortalFeature

Enabled user can register their phones in a self service portal

No administrator involvement required

E-Mail access only enabled after self-enrolement

User can lock and wipe their phones via the portal

Supported Platforms

Apple iPhone

Google Android

Windows Mobile 6.x

10

Functionality – Device Status ReportingFeature

Device status view in the Admin GUI

Flexible grouping, filtering and exporting of the device list

Collection of device properties like memory usage, battery level, IMSI, roaming mode, OS version, …

Supported Platforms

Apple iPhone

Google Android (partly)

Windows Mobile 6.x

11

Mobile Device Client AppsSMC client apps on Android and Windows Mobile

Distributed over-the-air from SMC server

Autostart at device boot

Minimal user interaction (non intrusive)

Apple iPhone and iPad are controlledwith the build-in management client

12

Screenshot – Admin Interface

13

Questions?