safely enabling mobile devices with globalprotect
TRANSCRIPT
-
8/10/2019 Safely Enabling Mobile Devices With GlobalProtect
1/12
Safely Enabling Mobile Devices
-
8/10/2019 Safely Enabling Mobile Devices With GlobalProtect
2/12
Unlocking The Potential of Mobile Depends On Security
Intranet
Running our
!usiness on
Mobile Devices
BenefitstoB
usiness
Mobile Maturity
E"ail
#ccessing
!usiness #pps
$ % &$'()* Palo #lto +et,orks- .onfidential and Proprietary-
-
8/10/2019 Safely Enabling Mobile Devices With GlobalProtect
3/12
E/isting #pproaches for Mobile Security Don0t 1ork
Approach Exposure to Risk
Block mobiledevices
People will still use mobile devices,except without your control
Hope existingsecurity
protects mobiledevices
Dont know if existing measures will beeective for mobile devices
Use basic
mobile securitylike ActiveSync
Doesnt address mobile threats andwont secure apps and data
2 % &$'()* Palo #lto +et,orks- .onfidential and Proprietary-
-
8/10/2019 Safely Enabling Mobile Devices With GlobalProtect
4/12
+e, approach to safely enabling "obile devices
Protect the Device Control the DataManage the Device
Ensure devices are safely
enabled ,hile si"plifying
deploy"ent 3 setup4 Ensure proper settings
in place* such as
strong passcodes and
encryption4 Si"plify provisioning of
co""on configurationlike e"ail and
certificates
Protect the "obile device
fro" e/ploits and
"al,are4 Protecting the device
fro" infection also
protects confidential
data and unauthori5ed
net,ork access
.ontrol access to data
and "ove"ent of
bet,een applications4 .ontrol access by app*
user* and device state4 E/tend data "ove"ent
controls to the device
to ensure data stays
,ithin 6business apps7
) % &$'()* Palo #lto +et,orks- .onfidential and Proprietary-
-
8/10/2019 Safely Enabling Mobile Devices With GlobalProtect
5/12
8lobalProtect Mobile Security Solution
GlobalProtect App
GlobalProtect Gateway
Delivers "obile threat
prevention and policy
enforce"ent based on apps*
users* content and device
state
Enables device "anage"ent*
provides device state infor"ation*
and establishes secure
connectivity
GlobalProtect MobileSecurity Manager
Provides device
"anage"ent* "al,are
detection* and device state
9 % &$'()* Palo #lto +et,orks- .onfidential and Proprietary-
-
8/10/2019 Safely Enabling Mobile Devices With GlobalProtect
6/12
Manage The Device
Manage device settings
4 Enforce security settings such as passcode4 Restricts device functions such as ca"era
4 .onfigure accounts such as e"ail* :P+*
1i;
-
8/10/2019 Safely Enabling Mobile Devices With GlobalProtect
7/12
Protect The Device
Consistent security everywhere
4 IPsec>SSA :P+ connection to a purposebuilt ne/t generation security platfor" for
policy enforce"ent regardless of the
device location
Mobile threat prevention
4 :ulnerability BIPSC and "al,are B#:C
protection for "obile threats4 URA filtering for protection against
"alicious ,ebsites
4 1ild
-
8/10/2019 Safely Enabling Mobile Devices With GlobalProtect
8/12
.ontrol The Data
Control access to applications and
data
4 8ranular policy deter"ines ,hichusers and devices can access
sensitive applications and data
4 Policy criteria based on application*
user* content* device* and device state
for control and visibility
4 Identify device types such as
iOS* #ndroid* 1indo,s* Macdevices
4 Identify device o,nership such
as personal B!ODC or corporate
issued
4 Identify device states such as
rooted>?ailbroken
4
-
8/10/2019 Safely Enabling Mobile Devices With GlobalProtect
9/12
Fo, the integrated solution ,orks
-
8/10/2019 Safely Enabling Mobile Devices With GlobalProtect
10/12
1hy Palo #lto +et,orks for Mobile Security
Integrates the necessary technologies P!,policy, threat prevention, management
"ni#uely capable of protecting the device byleveraging $ild%ire, IP&, and app policy
'ich security platform that can protect alltra(c, devices, applications and data in thenetwork
(( % &$'()* Palo #lto +et,orks- .onfident ial and Proprietary-
-
8/10/2019 Safely Enabling Mobile Devices With GlobalProtect
11/12
8lobalProtect Mobile Security Manager Ordering* Aicensing and #vailability
Mobile Security Manager runs on the ne, 8P;('' appliance
8P;('' co"es ,ith support for up to 9'' "obile devices #dditional capacity licenses BperpetualC to support additional devices
(G* $G* 9G* ('G* $9G* 9'G* and (''k
1ild
-
8/10/2019 Safely Enabling Mobile Devices With GlobalProtect
12/12