Secure BYOD with Enterprise Mobile Management

Transcription

1 Plan & Deliver Secure BYOD with Enterprise Mobile Management Suril Desai VP, Engineering

4 Growth of Mobility in Enterprise 350M work devices In 2016, 350M employees will use smartphones 200M will bring their own. - Forrester 32% growth Projected Enterprise Mobility Management spending CAGR (IDC) Mobile spend will reach $1.3 trillion as the mobile apps market reaches $55 billion in Forrester USD $1.3 trillion 4 Copyright 2013 CA. All rights reserved.

5 New Challenges in enabling a Mobile Enterprise Portable Data Problem Limited control over mobile devices accessing corporate data Lack of visibility Monitoring and managing the new mobile Infrastructure is challenging Rapid Device proliferation & BYOD Difficult to keep up with the sheer volume of mobile devices requiring management Managing Mobile Operations & Support Difficult to keep up with all the new device types needing to be managed 5 Copyright 2013 CA. All rights reserved.

6 BYOD View from the CIO office We need to increase efficiencies...and be mobile to IT Operations Employees I want to use my device... with apps BYOD Efficiently manage devices, distribute apps Enable working from anywhere any time Increase productivity by enabling mobile enterprise access Save CAPEX by enabling BYOD Remove constraints & deliver more innovative apps Build richer customer engagement Customers & Markets 6 Copyright 2013 CA. All rights reserved. We need an App for that

7 The Enterprise Mobility Landscape Enterprise Mobility Management CA MDM CA MAM CA MCM CA MEM DEVICE APPLICATION CONTENT Lifecycle management solutions for mobile devices Management of mobile applications and granular, app-level policies Solutions for simple, secure and intuitive access to content anywhere, on any device Secure access with native experience Comprehensive solution for device, app, and content 7 Copyright 2013 CA. All rights reserved.

8 CA Mobile Device Management

9 BYOD Use Cases 1 John Smith Joins ABC Corp. John uses CA MDM Self Service portal and installs CA MDM CA MDM server verifies John s identity and configures the device and pushes mobile Apps 2 3 John is productive accessing corporate resources (in less than 60 seconds) in the office and on the road 4 John loses his phone, locates via Self service portal and locks and optionally deletes the corporate app/data John moves to a different dept within the company and all the new app and config is automatically delivered 5 6 John leaves the company. CA MDM server automaticall y removes config/corp app installed IT admin has full access to corporate services consumed and telecom expenses incurred 7 Self Service Enterprise Apps Server Wireless 9 Copyright VPN Server WiFi 2013 CA. All rights reserved. Directory servers CABI Reports CABI analytics

10 CA Mobile Device Management (MDM) MANAGE Remote wipe/lock Application blacklist Manage by policy Telecom Expense Management PROVISION User-friendly enroll Zero-touch Enterprise App Store VPP support SECURE Policy enforcement Quarantine jail-broken devices security, access control SUPPORT Track devices / Apps Keep Apps up-to-date OTA updates, config Flexible Deployment SaaS or On-Premise 10 Copyright 2013 CA. All rights reserved.

11 Enterprise and Public App Distribution itunes App Store like user experience Smartphones are all about Apps Blacklist and whitelist apps per company policy Customizable App Storefront Ease of access Enterprise and public app store Automatic, and optional install of enterprise Apps Auto Upgrade notifications Categorize apps by type 11 Copyright 2013 CA. All rights reserved.

12 CA MDM Key Advantages Highly scalable architecture, On-premise or SaaS Most extensive device support including Windows PCs Rich & extensible policy architecture to group users on geography, hierarchy Optional Relay server to avoid firewall holes Enterprise integration with LDAP, certificate authority, Gmail, Exchange 365 Restrict access to CA MDM managed devices Self-service portal to empower end user to self-enroll, under 60 secs Extensive analytics using CA s BI platform Telecom expense management (TEM) 12 Copyright 2013 CA. All rights reserved.

13 Business Analytics Data at your finger tips CA Business Intelligence (CABI) Integration Real time insights in to mobile environment Governance in real time Identify non compliant OS/Patching Access extensive reports Web Interface, SAP BI, SAP Explorer Mobile App 13 Copyright 2013 CA. All rights reserved.

14 CA MDM Differentiated and Comprehensive Offering Architecture Multi-tenant Highly scalable and highly available Peak traffic control/bandwidth throttling Access based on Role Multi OS support including Windows desktops Extensive logging Customizable SSP/App branding Oracle and SQL Support Security On-device encryption Device and user authentication Backup and restore for desktops Remote lock and selective/complete wipe Rooted and jail broken device detection Selective or full device wipe Full BYOD freedom Device Diversity & Windows Desktop Management ios/android, Samsung SAFE & BlackBerry support Support Windows XP to 7, 32bit & 64bit OS Extensive scripting Lightweight agent on desktop PC File and software distribution Inventory and asset management Desktop analytics Integration with Client Auto (ITCM) Holistic view of enterprise endpoints Single Admin console to view both enterprise liable and BYOD inventory (HW/SW) Combined reporting/analytics Enterprise Integration Certificate Authorities (SCEP, PKI) Directory services (LDAP/AD) (Exchange 365 and Gmail) VPN (L2TP, PPTP, IPsec, Juniper, Sonic wall, Aruba, Cisco, F5 SSL and Checkpoint) Wi-Fi (WEP, WPA, WPA Enterprise - TLS, TTLS, EAP, PEAP) Configuration and Profiles Extensible policy definition for enrollment, session, application & configuration Certification integration Geo-based provisioning and configuration Flexible Policy definitions Self-Service Registration, unregister and activation Locate a device Clear passcode, lock and wipe Auto-registration via LDAP credential Remove control Device info Integration with Google maps App requests Analytics Full CA Business Analytics (BA) support Reports access via mobile and web based Extensive and extendible reporting Compliancy mobile dashboard Application mobile dashboard Application device dashboard Mobile App Store Easy to use enterprise and public app store HTML and native app support White and black listing (extended for Samsung Android platform) Volume purchase program 14 Copyright 2013 CA. All rights reserved.

15 CA Mobile App Management

16 CA MAM Enables Security, Control, Management Addresses BYOD Needs Control Who can access apps Limit Distribution, Enforce Authentication & SSO Secure What apps may access Device Feature Blocking: GPS, Contacts, Camera, Control Where & When apps are accessed Geo-Fencing, Time-Fencing, Network-Fencing Secure How apps access data Add encryption for data at-rest & in-flight, Require VPN Manage apps remotely Force Updates, Lock Apps, Selectively Wipe Apps 16 Copyright 2013 CA. All rights reserved.

17 CA MAM Provides Fine-Grained App Security Features Centrally Managed for BYOD Office GeoFence Multi-Factor Auth VPN-Only No Contacts Access Required Update No Public Wifi 8am 6pm Only No Camera No Copy/Paste Auth Required App Data Encrypted 17 Copyright 2013 CA. All rights reserved.

18 Manage Internal Apps and 3 rd -party Apps SDK or App Wrapping SOFTWARE DEVELOPMENT KIT APP WRAPPING Include security code within the application Implemented during app development Implemented by developers Place a layer of security and control around the application Security implemented after app development Implemented by IT Security administrators 18 Copyright 2013 CA. All rights reserved.

24 CA Mobile Content Management

26 The Solution: CA Mobile Content Management Key values: 1. Unified mobile access to disparate content repositories 2. Collaboration over disparate content with other users 3. Cross device access to the content 4. Security of, and control over, enterprise content 26 Copyright 2013 CA. All rights reserved.

30 CA Mobile Management

31 What is CA MEM? Protect confidential data within mobile inbox essential for BYOD Securely deliver content to endpoints (Mobile, Outlook, Web) Secure content delivery by within and outside the enterprise Complements CA-DLP or as stand alone deployment For B2B and B2C communications 31 Copyright 2013 CA. All rights reserved.

32 User sends an How does it work? is classified as sensitive Sensitive is encrypted Encrypted is delivered CA-DataMinder SaaS Ready Seamless to sender Near seamless for the recipient Mobile devices Enterprise Outlook Cross domain s Gmail, Yahoo! 32 Copyright 2013 CA. All rights reserved.

33 Mobile Management (MEM) Security of with native mail client Exchange access control to allow access only for devices under management Use of existing native mail client for better user experience Content aware: encrypt only what needs to be secured using multi-factor authentication Supports inter-company and intracompany use-cases Encryption Control 33 Copyright 2013 CA. All rights reserved.

34 CA Mobile Services Management

35 Continued Rise in Business Apps Business Apps continue to gain traction! 29.3% 81% plan to build multi-os business apps Next 3 months, developers plan to build: Field Service, Data Collection, & Forms Apps (46.8%) Productivity Apps (43.9%) Business Intelligence Apps (34.9%) 39% building apps for a private enterprise app store Source: Appcelerator and IDC's Mobile Enterprise Developer Survey, 1Q12 35 Copyright 2013 CA. All rights reserved.

36 MSM Mobile DevOps App Release Management App Testing API Virtualization App Crash Analytics App Performance Mobile centric DevOps offerings solve many of mobile app development challenges 36 Copyright 2013 CA. All rights reserved.

37 MSM Mobile App Deployment, Operations & Support Security Performance Operations Support Mobile App Gateway End-to-End App Performance Crash Analytics User Experience Analytics Remote Support Integrated solution to operationalize key aspects of app delivery 37 Copyright 2013 CA. All rights reserved.

40 Distancing from the silo competition Prevent Data leak to, from and on devices, apps Unified process for all support Data Leak protection Support Desk Integration Identity & Policy Management CA EMM Device and App Risk Profiling Strong Auth Unified Device Handling Single Management point for all resources Protect App and Data with convenient, strong authentication Provide management for mobile and non-mobile. Enterprise and BYOD Eliminate risk by profiling devices and apps at run time 40 Copyright 2013 CA. All rights reserved. 40

42 Q&A

43 FOR INFORMATION PURPOSES ONLY Terms of this presentation This presentation was based on current information and resource allocations as of April 2013 and is subject to change or withdrawal by CA at any time without notice. Notwithstanding anything in this presentation to the contrary, this presentation shall not serve to (i) affect the rights and/or obligations of CA or its licensees under any existing or future written license agreement or services agreement relating to any CA software product; or (ii) amend any product documentation or specifications for any CA software product. The development, release and timing of any features or functionality described in this presentation remain at CA s sole discretion. Notwithstanding anything in this presentation to the contrary, upon the general availability of any future CA product release referenced in this presentation, CA will make such release available (i) for sale to new licensees of such product; and (ii) to existing licensees of such product on a when and if-available basis as part of CA maintenance and support, and in the form of a regularly scheduled major product release. Such releases may be made available to current licensees of such product who are current subscribers to CA maintenance and support on a when and if-available basis. In the event of a conflict between the terms of this paragraph and any other information contained in this presentation, the terms of this paragraph shall govern. Certain information in this presentation may outline CA s general product direction. All information in this presentation is for your informational purposes only and may not be incorporated into any contract. CA assumes no responsibility for the accuracy or completeness of the information. To the extent permitted by applicable law, CA provides this presentation as is without warranty of any kind, including without limitation, any implied warranties or merchantability, fitness for a particular purpose, or non-infringement. In no event will CA be liable for any loss or damage, direct or indirect, from the use of this document, including, without limitation, lost profits, lost investment, business interruption, goodwill, or lost data, even if CA is expressly advised in advance of the possibility of such damages. CA confidential and proprietary. No unauthorized copying or distribution permitted. 43 Copyright 2013 CA. All rights reserved.