Deploying Management and Security Agents to Mobile Devices

Transcription

1 Deploying Management and Security Agents to Mobile Devices John Engels Adam Licata Scott Jareo Principal Product Manager Sales Engineer Field Enable. Symantec ITS Partners Symantec EM B23 Deploying Mgmt and Security Agents Vision

2 Agenda 1 Symantec MDM Agent Options John Engels 2 Mobile Agent Creation Steps Adam Licata 3 Demo: Building Mobile Agents Adam Licata 4 Deploying Security Agents 5 Summary and Q&A EM B23 Deploying Mgmt and Security Agents Vision 2012 SYMANTEC VISION

3 Why Use an Agent For Mobile Device Management? Agent vs. Agentless Agentless MDM is only an option with ios MDM is a process built into ios, managed from server MDM does not provide all features needed for management Jailbreak status Enhanced inventory (e.g. VPN status) Enterprise presence on desktop EM B23 Deploying Mgmt and Security Agents Vision 2012 SYMANTEC VISION

4 ios Appstore Limitations AppStore Requirements All public apps must come from the Apple AppStore Apps must categorized and behave within certain limits: Most app categories cannot run in the background MDM is not an ios app category Symantec and many MDM vendors choose GPS category Apps cannot be redistributed in the exact same form outside the store EM B23 Deploying Mgmt and Security Agents Vision 2012 SYMANTEC VISION

5 Enterprise Agents for MDM Enterprise App Concept Enterprise signed MDM agents provide enhanced features Enterprise apps have fewer restrictions Enterprises can directly distribute their apps to users under their control Requirements: Join Apple s ios Enterprise Developer Program (not App Developer) Obtain Symantec s unsigned SMM app from server (shown at right) Publish the app with your certificate EM B23 Deploying Mgmt and Security Agents Vision 2012 SYMANTEC VISION

6 Symantec s MDM AppStore Apps vs. Enterprise Apps AppStore App Download from the Apple store Runs as GPS category app Only runs in background in limited ways 5 min after put in background After significant location change with location sharing When triggered by MDM server No Apps tab user triggered app download not available Symantec name and brand Enterprise App Download from a company site Runs as VoIP category app Can run in background via VoIP category allowances- Wakes up on admin set frequency Can leverage location sharing Also supports MDM triggered check-in App tab allows user selection of apps Your name, brand, and look/feel EM B23 Deploying Mgmt and Security Agents Vision 2012 SYMANTEC VISION

7 Customizable Native Agents Symantec Mobile Management SMM Agent for ios (Works with SMM or Odyssey Athena) Nukona Native client for ios Native client for Android EM B23 Deploying Mgmt and Security Agents Vision 2012 SYMANTEC VISION 2012

8 Building the SMM Agent for ios Prerequisites Mac OS X with XCode 4.2 or above ios Developer Enterprise Program ios Device Optional Custom images (backgrounds, icons, etc.) EM B23 Deploying Mgmt and Security Agents Vision 2012 SYMANTEC VISION 2012

9 Building the SMM Agent for ios Distribution Requirements Order 1. Create App ID 2. Create Distribution Certificate 3. Create Distribution Provisioning Profile EM B23 Deploying Mgmt and Security Agents Vision 2012 SYMANTEC VISION 2012

10 Security Agent Options Presentation Identifier Goes Here SYMANTEC VISION

11 Managed Managed & Unmanaged Symantec s Core Mobility Solutions Symantec s advanced mobile solutions are designed to work with or without device management Symantec AppSecure & AppSecure Enterprise Symantec Zone for Business Symantec O 3 Symantec Mobile Security (Nukona) App & Content Security/ Distribution Secure File Collaboration Secure Web Services Access & Single Sign-on Device Security Mobile Management.Cloud (future) SaaS MDM Symantec Mobile Management Mobile Management for SMP Symantec Management Platform onprem MDM Mobile Management for Config Manager Microsoft SCCM on-premise MDM Symantec s Mobile Management Product Line offers enterprise-ready deployment options in the cloud or integrated into key endpoint management environments SYMANTEC VISION 2012 Symantec Advances Enterprise 11 Mo

12 Deploying Security Agents Android Symantec Mobile Security 7.2 Android agent Windows Mobile Android will be available via: Google Play Enterprise AppStore Windows Mobile Deploy from server Push or pull Mainly embedded use (e.g. barcode scanners, medical devices) ios TBD when Apple gives us APIs EM B23 Deploying Mgmt and Security Agents Vision 2012 SYMANTEC VISION

13 Enterprise App Deployment Options Enterprise Mobile Library Web App Center Presentation Identifier Goes Here SYMANTEC VISION

14 Q&A Presentation Identifier Goes Here SYMANTEC VISION

15 Win the New ipad Discovery Starts Here Get all Four QR Codes for a Chance to Win Go to any of the four designated locations, in any order, to get the discovery code. Scan the QR code and enter your address. 3 Second Prize Winners (3 entries required) 5 Third Prize Winners (2 entries required) For official drawing eligibility and rules go to: discover.it-solutions-planning.com DISCOVER EM B23 Deploying Mgmt and Security Agents Vision 2012 SYMANTEC VISION 2012

16 Thank You Presentation Identifier Goes Here SYMANTEC VISION