MOBILITY MANAGEMENT SELECTION GUIDE

Transcription

1 MOBILITY MANAGEMENT SELECTION GUIDE A range of use cases are emerging for enterprise mobility and IT pros are under the gun to support them while adhering to corporate security standards. To do so, they need flexible, robust mobility management augmented by a broad ecosystem of productivity tools. Discover the criteria IT can use to choose the optimal enterprise mobility management system to meet these fast-moving business requirements. IT executives and administrators have a pressing need to support bring-your-own-device initiatives to enable maximum productivity, which includes access to a wide range of business apps that executives and other employees deem critical. These users are increasingly applying pressure to gain anytime, anywhere access to those apps as well as corporate data so they can drive performance. IT and security pros, however, are cognizant that fully enabling business professionals to go mobile can introduce new risks to proprietary data. To support a highly mobile workforce using a wide range of devices to access corporate assets, a robust, multilayered approach to security is needed. The risks that come with BYOD are enumerated in TechTarget s 2013 mobile enterprise survey, in which respondents listed their three most pressing mobile security concerns: data leakage from a mobile device (cited by 45%), unauthorized access to data (41%) and device loss or theft (40%).

2 With today s mobile workforce, security concerns are validated frequently, through a wide range of high-profile as well as unreported data breach incidents. Whether a company gets a public black eye or not, lost data can lead to a seven-figure financial impact: An average data breach can cost as much as $7.2 million in lost revenue and fees, according to the Ponemon Institute. At the same time, 86% of organizations have had laptops lost or stolen, and more than half of those incidents resulted in a data security breach, IDC reports. Clearly, business executives are prepared to invest in the security controls required to protect company data as workers go fully mobile, and the risks that keep them up at night are translating directly into security technology and investment priorities for the coming year. In the TechTarget survey, 51% of respondents identified access control as their most important mobile security initiative, while 48% cited data loss prevention and 43% chose authentication. Such findings demonstrate the urgent need for IT leaders to put in place technology that enables the mobility that executives and other users require, while placing strong emphasis on protecting devices, corporate applications and data. This white paper is geared toward decision-makers in the late stages of evaluating enterprise mobility management products. It lays out the diverse use cases they need to support and is intended to help them reach an informed decision by detailing mobility management functions that support each use case. Freedom of (Device) Choice This scene plays out in coffee shops, retail stores and youth sports games every day: An individual is reading and responding to work s or texts from a smartphone on personal time, indicating how smartphones and the always-on connectivity they enable have blurred (some might say obliterated) the distinction between work and personal time. So it no longer makes sense to impose a company-commissioned device on a user who blends his work and personal life and has a strong personal preference for and proficiency with his own particular mobile device, which may be an iphone, Android phone, Windows phone, ipad, Android tablet or other device. In many cases, employees want to use their own devices to access company and data, and they want to be able to share files in fewer steps than they can with publicly available cloud file-sharing services such as Dropbox. Of course, they need to toe the line when it comes to compliance with corporate data policies as well. For IT professionals, then, supporting mobile workers means having to secure devices they didn t select or commission. These circumstances call for the maximum level of control and manageability, as well as tools and apps that integrate seamlessly with the existing security architecture. To meet this any-device requirement, IT administrators need the flexibility to configure corporate and employee devices according to an individual s business role and access privileges. They need to deliver self-service device enrollment and distribute configurations, policies and apps over the air based on user profiles. Examples of policies that can be applied include requiring the mobile device to be connected to a secure wireless network, forcing authentication at every app launch, defining which users can access which apps, and preventing content from being sent via SMS text message. IT also must be able to perform remote troubleshooting on mobile devices to ensure that users remain productive and connected. If a device is lost or stolen, remote wipe and detonation must be enabled, and devices must be decommissioned when an employee departs. 2

3 Citrix XenMobile is uniquely positioned to deliver on requirements for any-device support, flexible configuration, and remote troubleshooting and device wipe capabilities. Competing systems, in contrast, don t offer the same comprehensive range of functionality. Share Files, Support Other Mobile Apps Securely So your workers have been enabled for BYOD: They can select their own devices and have security controls applied to ensure that they don t run afoul of corporate policies or data protection requirements. Hardware and security are the infrastructure piece of the puzzle. Next, users need access to apps that can fully unlock their productivity. They need to easily and securely share files and collaborate with people in real time, no matter where they are located. These are all necessities that improve the mobile experience and lead to greater productivity. Some enterprise mobility suppliers provide secure mobile apps such as , calendaring and file sharing, but they do so at the expense of a native, familiar user experience. Such tradeoffs just won t stand in a mobile-first world. Apps that lack Office-like user interfaces require training, and that learning curve comes at the expense of productivity. Native user experience is a baseline requirement to ensure successful adoption of a mobility program. Citrix mobile productivity and collaboration apps are like having Microsoft Office on a mobile device. Available apps include ShareFile, WorxMail, WorxWeb, GoToMeeting, Podio, Worx Home and GoToAssist. ShareFile is a strong alternative to publicly available cloud-based file-sharing services. It s a data-sharing and synchronization tool with full integration into the Citrix productivity suite and all the security controls of XenMobile. Data in motion is secured via SSL 3 encryption; downloaded files are secured at rest on a device using AES 256-bit encryption. WorxMail is a secure , calendar and contact app with the full management and security controls that IT requires. WorxWeb is a secure browser that offers a user certificate and Kerberos single sign on (SSO) to intranet Web apps. GoToMeeting is a widely used Web conferencing and online meeting tool that includes the ability to join a session by following a link directly from one s calendar. A new fast-dial capability supports auto-dialing of conference bridge numbers and participant ID codes. Podio is an online work and collaboration platform for creating workspaces that bring coworkers together to manage projects. Worx Home allows IT to enforce mobile settings and security while providing live support services. Citrix s XenMobile communicates with WorxHome to deliver device-specific policies and Worx-enabled app policies. GoToAssist is a support app that offers mobile users one-touch help desk access that can be invoked directly from their mobile devices. Especially in highly regulated industries think financial services and healthcare it s critical that applications retain centralized controls and security to pass IT and regulatory muster. XenMobile technology and the Citrix application architecture sandbox keep these productivity apps and the data they transport under tight security controls while maintaining the rich experience users expect. 3

4 Unlike XenMobile s turnkey approach to productivity apps, competing enterprise mobile management systems rely on third-party technology that necessarily lacks complete integration, or they are in the earliest stages of adding such apps. Above and beyond productivity, having a secure, centrally managed solution to corporate America s Dropbox problem should go a long way toward keeping corporate data under lock and key as workers expand their mobile activities. Third-Party App Support Completes the Mobile Experience Executives and other users will not be satisfied with accessing just personal productivity apps on their mobile devices. They want the full range of their apps, including those that support unique roles, industries and functions. That requires making third-party apps available to ensure that no functional compromises are made. To augment its own productivity apps, Citrix operates a mobile marketplace called the Worx App Gallery, where Citrix and third-party apps can be searched for and accessed by keyword, platform (Android, ios) and business function (productivity, sales, marketing and services, system management). To highlight the breadth of functions available through the gallery, a search for productivity apps, for example, produces a selection of 24 packages from 21 partners. Available apps that reflect the range of functionality include: PDF annotation, from EuroSmartz Mobile video and collaboration, from Damaka ipad document management, from Wheelhouse Analytics Citrix partners and enterprise developers can embed a library of security controls into any app using the Worx App SDK. This code fortifies the apps with data encryption, password authentication, secure lock and wipe, and application-specific micro-app virtual private network (VPN) capabilities. Here s how a micro-app VPN works: When a mobile app user tries to access the internal network remotely, a unique VPN tunnel is created for that mobile app. Micro-app VPN functionality does not require a device-wide VPN, which can compromise security on untrusted mobile devices. As a result, the internal network is not exposed to viruses or malware that could infect the entire corporate system. With this access control in place, corporate mobile apps and personal mobile apps are able to coexist on one device. The Worx App SDK also supports data leakage prevention features such as disabling copy and paste and ing of corporate documents. As an alternative approach, developers can wrap apps in a container post-development without adding code to their app. Containers separate corporate apps and data from personal apps and data on the mobile device. In cases where a software developer hasn t yet developed a fully mobile-optimized app, those apps can still be secured under a Citrix umbrella by leveraging XenDesktop and XenApp functionality, which securely mobilizes any Windows apps so they are touch-enabled and perform at high speed over mobile networks. XenDesktop is a powerful option in those cases in which company policy precludes storing data on a device. The Worx App Gallery is a powerful reflection of the secure mobile ecosystem that Citrix has created to enable BYOD for enterprise IT organizations. Competing enterprise mobility management solutions offer some third-party support, but with neither the breadth of functionality nor the app store model that Citrix provides. 4

5 Customized, Mobilized Apps The final use case in the BYOD progression is giving business users and IT the flexibility they need to access custom applications, which tend to be industry- and company-specific. This can be achieved leveraging the enterprise mobile management functions that Citrix provides. When that s in place, employees have their entire range of business apps at their disposal, from the device of their choice. Using the Citrix Worx App SDK, corporate developers can leverage Citrix code to securely mobilize custom applications they ve built for use within a business unit, and which are core to maintaining their business operations. This approach will apply and enforce the same mobile security controls that users have come to know through the Citrix enterprise mobile management architecture. For instance, strong network access controls are enabled by Citrix micro-app VPN capabilities, as are encryption and device management. In contrast, competing mobility management solutions don t offer comparable software development tools to add robust, corporate-grade controls from a trusted management software supplier to their internally developed custom apps. Additional Citrix platforms can play a key role in efficient, effective delivery across the full spectrum of mobile apps Citrix, third-party and custom corporate apps. Among those platforms is NetScaler, a leading application delivery controller that gives IT pros the ability to make intelligent decisions about which apps should receive priority over others, and to manage their traffic accordingly. Custom business apps are likely to have some of the highest performance requirements and therefore warrant top priority from a network usage and prioritization perspective. No Compromises: A Checklist for Selecting the Right Partner The diverse mix of mobile devices that IT must support in a BYOD context is one clear indicator of the complexity that companies face in delivering end-to-end security for today s mobile and cloud-connected business apps. With that level of complexity, assembling a series of point security systems isn t a viable option. Instead, what IT requires is: Solution breadth: A provider with an end-to-end system that secures applications, devices and data. Maximum productivity: Secure productivity and file-sharing apps that are tightly integrated. Functional completeness: An ecosystem of third-party applications. End-to-end security architecture: Development tools that enable consistent application of security features, for both custom and off-the-shelf apps. Biggest bang for the buck: Attractive total cost of ownership that only a singlevendor solution can provide and that executive management will love. Investment protection: An ideal mobility management supplier that is on rocksolid financial footing, with growing revenues and profitability that yield ongoing investment in the development of new products and services. The above criteria should serve as a requirements guide for selecting the optimal enterprise mobility management system. Citrix believes XenMobile is the only system that will let IT check off each of the requirements. We invite you to take a close look at Citrix versus its competitors, and we re confident the best mobility management system will win. The following comparison chart can help you begin your journey: 5

6 Broad product line and low TCO Productivity apps Universal device support Device and app security App store and delivery App container Application network access Network scalability and application performance Data leakage prevention Citrix Citrix offers the most complete enterprise mobility management (EMM) solution to not only manage mobile devices and apps, but also increase user productivity. Only Citrix provides EMM with a complete portfolio of integrated mobile productivity apps, including , calendar, contacts, browser and file share, sync, store and edit. In addition, only Citrix offers integrated access to Windows desktop, SaaS and Web productivity apps. XenMobile not only supports a broad range of mobile devices, but it also provides integrated remote support, which allows IT to minimize any user downtime. XenMobile goes beyond basic mobile device and app security. For example, XenMobile leverages NetScaler, which provides a network policy enforcement point and an SSL VPN gateway, requiring users to authenticate at the perimeter. Also, Citrix lets companies deliver their own secure apps by injecting a single line of code that allows the app to inherit controls such as single sign on, secure inter-app communication, information/ data containment and restrictions based on device states and the user s role. Citrix enables IT to deliver native mobile, Windows desktop, SaaS and Web apps to mobile devices through a unified app store. Citrix offers both virtual and native mobile app containers to secure data at the application level. Citrix delivers a micro-app VPN and does not require a device-wide VPN. To control the delivery of mobile apps, Citrix s EMM architecture includes an enterprise-grade network gateway that features local and global server load balancing, full Web app firewall security, fast and intelligent application acceleration capabilities, and an easy-to-use policy framework for simple deployment with absolutely no programming required. Only Citrix has a complete file sync, store and editing solution that supports all devices (smartphones, tablets, desktops and laptops), reducing the likelihood of data loss and increasing user productivity. Other EMM vendors Most EMM vendors offer basic device and app management features with very limited productivity capabilities. As a result, most EMM vendors must partner with others, which results in higher TCO. Most EMM vendors offer limited productivity features or partner with other vendors, resulting in higher TCO and lower productivity. No other vendor provides integrated remote support for mobile users. Most other EMM vendors support basic mobile device management and mobile application management security controls provided by the OS or device manufacturer. Other EMM vendors app stores support only the delivery of native e-mobile apps, creating an app gap that results in lower user productivity. Other EMM vendors must partner to deliver virtual containers, resulting in higher TCO and risk. Other vendors require either a devicewide VPN or a network operations center, which introduces more security risk and a higher likelihood of application service disruption. Other EMM vendors must work with another vendor, which increases TCO and affects application performance. Most vendors include only limited file sharing and support only mobile devices, resulting in a higher likelihood of data loss and lower productivity levels. Third-party and custom apps Appendix Citrix has the largest portfolio of secure third-party mobile apps. Other EMM vendors have a limited number of apps. 6 XenMobile is a comprehensive enterprise mobility management solution that addresses end-user productivity issues related to , document and content management, intranet Web browsing and mobile solutions architectures. The following charts illustrate how Citrix XenMobile compares with other mobility solutions from an end-user enablement viewpoint rather than a nearly identical device management view. 1 1 XenMobile Competitive Overview, Citrix, December 2013

7 Productivity Feature AirWatch MobileIron BlackBerry Good Citrix Send, Receive, Reply, Reply all, Forward Create, Edit, Delete drafts (includes sync to server) Flag s Mark as unread Folder support (view all server folders) Threaded conversation or chronological view Search Accept, Tentative, Decline meeting invites Secure integrated attachment viewing Create new with multiple attachments Reply, Forward and add attachment(s) Multi-platform secure containerized native client Rich text editing notification with subject, preview on lock screen (all platforms) Push (all platforms) Detailed calendar reminders on lock screen Set internal, external out-of-office message Single touch to join online meeting Single touch to join audio conference Detailed contact information (GAL search) Week view in calendar Schedule online meeting, audio conference in new meeting invite Add attachment(s) to new meeting invite Forward meeting invite to others with attachment(s) Single touch to send running late Single touch to reply to meeting organizer with attachment(s) Single touch to reply to all meeting invitees with attachment(s) Attach or take photo in New, Reply, Forward message Graphical view of users free/busy calendar Integration with Microsoft Rights Management 7

8 Document and Content Management Feature AirWatch MobileIron BlackBerry Good Citrix View, download, store documents securely on device Access SharePoint and network file shares Desktop two-way document sync (cloud storage) Desktop two-way document sync (on-premises storage) Integrated document editing, annotation at no additional cost Integrated editor allows for track changes and comments Share documents without full file upload or download Share multiple documents and folders Enterprise-class audit trails (who, when, where) Documents expire, limit downloads per person Integration with Outlook (on desktop) to send link to files Intranet Web Browser Feature AirWatch MobileIron BlackBerry Good Citrix Intranet Web browsing without full-device VPN Push internal certificates Kerberos and user-certificate SSO browsing Cloud, SaaS, extranet SSO Push bookmarks, URL black and white lists, default homepage 8

9 Mobile Solution Architecture Feature AirWatch MobileIron BlackBerry Good Citrix Cloud-integrated solution with access to backend services On-premises device management server DMZ device required for Web, intranet access No additional DMZ device(s) required for secure No additional DMZ device(s) required for SSL offloading (EAS) DMZ device can benefit non-mobile business uses Enterprise-class scale and availability 9