Deploying Management and Security Agents to Mobile Devices. Deploying Mgmt and Security Agents

Transcription

1 Deploying Management and Security Agents to Mobile Devices John Engels Principal Product Manager Symantec Scott Jareo Field Enablement Engineering Symantec

2 Agenda 1 Symantec MDM Agent Options 2 Mobile Agent Creation Steps 3 Demo: Building Mobile Agents 4 Deploying Security Agents 5 Summary and Q&A

3 Why Use an Agent For Mobile Device Management? Agent vs. Agentless Agentless MDM is only an option with ios MDM is a process built into ios, managed from server MDM without an agent - does not provide all features needed for management Jailbreak status Enhanced inventory (e.g. VPN status) Enterprise presence on desktop

4 ios Appstore Limitations AppStore Requirements All public apps must come from the Apple AppStore Apps must categorized and behave within certain limits: Most app categories cannot run in the background MDM is not an ios app category Symantec and many MDM vendors choose GPS category Apps cannot be redistributed in the exact same form outside the store

5 Enterprise Agents for MDM Enterprise App Concept Enterprise signed MDM agents provide enhanced features Enterprise apps have fewer restrictions Enterprises can directly distribute their apps to users under their control Requirements: Join Apple s ios Enterprise Developer Program (not App Developer) Obtain Symantec s unsigned SMM app from server (shown at right) Publish the app with your certificate

6 Symantec s MDM AppStore Apps vs. Enterprise Apps AppStore App Download from the Apple store Runs as GPS category app Only runs in background in limited ways Up to 5 min after put in background After significant location change with location sharing When triggered by MDM server No Apps tab user triggered app download not available Symantec name and brand Enterprise App Download from a company website Runs as VoIP category app Can run in background via VoIP category allowances- Wakes up on admin set frequency Can leverage location sharing Also supports MDM triggered check-in App tab allows user selection of apps Your name, brand, and look/feel

7 Customizable Native Agents Symantec Mobile Management SMM Agent for ios (Works with SMM or SMM for SCCM) App project is installed on server during installation Requires Apple Xcode to create SMM Agent App Center Native client for ios Native client for Android Built using app builder tool on the server App Center Agent 7

8 Building the SMM Agent for ios Prerequisites Mac OS X with XCode 4.2 or above ios Developer Enterprise Program ios Device Optional Custom images (backgrounds, icons, etc.) Enrollment steps (e.g. corporate/private field, URL, etc.)

9 Building the SMM Agent for ios Distribution Requirements Order 1. Create App ID 2. Create Distribution Certificate 3. Create Distribution Provisioning Profile

10 App Store Deployment Options

11 Enterprise App Deployment Options Symantec Mobile Management Enterprise Mobile Library Symantec App Center Web/Agent App Center Requires MDM device management Currently allows app push and app pull Only native app security & controls Can be used with or without MDM device management Currently only supports app pull Enhanced Symantec app wrapping security and controls

12 App building demonstration

13 Security Agent Options

14 Deploying Mobile Security Agents Android Symantec Mobile Security 7.2 Android agent Windows Mobile Android will be available via: Google Play Enterprise AppStore Deliver via App Center or SMM Windows Mobile Deploy from server Push or pull Mainly embedded use (e.g. barcode scanners, medical devices) ios TBD when Apple gives us APIs

15 Q&A

16 Thank You