Bring Your Own Device:

Save this PDF as:
 WORD  PNG  TXT  JPG

Size: px
Start display at page:

Download "Bring Your Own Device:"

Transcription

1 Bring Your Own Device: Finding the perfect balance between Security, Performance, Flexibility & Manageability SECURELINK WHITEPAPER 2012 By Frank Staut

2 Management summary This white paper discusses some scenarios for bringing your own device to the office and goes more into detail on network access security. We will show that access to the network from within the office can be treated in exactly the same way as access from remote locations. As SecureLink is an independent network and security integrator we will give our advice on a best practice approach. We will explain in detail why it is according to us based on the remote access solutions from Juniper Networks and the firewalls of Palo Alto Networks. Wireless access to the network can be foreseen with the wireless solutions from Juniper Networks in a very secure way. The goal of this white paper is to discuss a simple approach in allowing devices to the network. Depending on the current security policies that are in place for the use of laptops there are mainly 2 solutions, either you go for a full blown security or you accept the risks. This white paper is not about legal issues regarding BYOD, nor will we discuss the management of the devices itself. Introduction It is clear that there is a big demand from users to use their own smartphones, tablets and PC s to connect to the corporate network. Whether it is just for reading or making notes on their ipad during a meeting, it all comes down to more flexibility. People want to use their MacBook Air or their newest Samsung smartphone and they want to have the flexibility to use it everywhere, both within the office as well as everywhere else where an Internet connection is available. By definition, more flexibility mostly means less security. This is the challenge that network and security managers have to cope with. Finding the right balance between flexibility and security also depends on the organization itself. For a bank it will be different than e.g. for a small printing company. Different device types There are multiple types of devices such as: Smartphones Tablets Netbooks PC s Navigation systems in cars Instead of classifying devices based on a type it is more important to look at the different operating systems as the operating systems often determine what the functionality is of the device. Apple ios Android Symbian Windows Mobile Blackberry MacOS Windows Linux A very clear trend is that almost all devices have wireless connectivity today and that almost all devices have a browser. As we will discuss further in this document we have to take into account this wireless connectivity especially when we want to allow these devices to the corporate network. By Frank Staut 2

3 Different access types Potential risks are: Dataloss when a device is lost or stolen Viruses or other malware that spread via unprotected devices Smart phones are mostly used for reading s. However it is clear that more and more applications become available for these devices. As tablets have larger screens, they are more useful to run specific applications such as e.g. remote desktop. The main difference between a corporate owned device and a user owned device is typically that the corporate owned device has security software installed and that the user does not have admin rights to turn it off. Depending on the environment, the installed security software is typically a combination of: Anti-virus/anti-malware Personal firewall Data Loss Protection (DLP) Disk encryption If we look at the different types of access we can distinguish the following: access (typically activesync) Access to web based applications Access to specific applications (e.g. Citrix or Microsoft Terminal Services) Full network connectivity As we have identified at least 8 different operating systems and 4 different access types we should further describe 32 scenarios However we prefer a clear and simple approach and we will try to show you that there are two main solutions: either you go for a full blown secure solution or you accept the risks. Depending on your current security policy for laptops this choice can be made very easily. If you look at these access types you can see that there are almost no differences, whether you want to have a remote connection from home or if you want to connect to the office network directly. If you have a smart phone you want to be able to read your s, regardless whether you are in or out of the office. If you have a laptop you want to use it for accessing specific applications, both from home as in the office. Security risks for different scenario s Network access Did you notice that we didn t use the term BYOD yet in this document? In our opinion the concept of bringing your own device and connect it to the network is exactly the same as the remote access concept. Both have similar security risks. Whether you come to the office with a smartphone or with a laptop, the least you would expect is that you have wireless internet/network access. Most companies today have a wireless infrastructure which can be used for this. A wireless infrastructure typically has multiple SSID s: SSID for corporate devices such as corporate laptops SSID for guest access SSID for mobile devices From a security point of view it is important to map these SSID s to different VLANs which are connected to a firewall. The security settings for these SSID s will be different. For example: The corporate SSID is typically protected with 802.1x and an additional machine certificate and is mostly used for company owned laptops. The guest SSID will generally be protected by a captive portal, vouchers for accessing the guest network can be obtained via e.g. a receptionist. The mobile SSID can be protected via e.g. a WPA2 key, an optional user authentication can be implemented. The goal is that all traffic is at least encrypted. By Frank Staut 3

4 EX PoE PSU 1 Provide an Earthing Connection V~/ V~ 50/60Hz, 4/2A! DISCONNECT ALL POWER BEFORE SERVICING PSU 2 Console WLC8 7 Uplinks 8 Link MP PoE ! CONSOLE INTERNAL EXTERNAL SA 4500 An important remark is that you need to take into account that wireless access is often more protected than wired access. In order to access a wireless network, you typically need at least a username and a password or an encryption key and in many cases also a certificate. In order to connect to a wired network you just plug in the cable unless an 802.1x solution is used. Practical implementations What we see as a best practice for most companies is a combination of a Palo Alto Networks firewall and a wireless and remote access solution from Juniper. The reason why we prefer a so-called next generation firewall is that it combines classic firewall features with user authentication, content filtering and application awareness. A best practice design is also to separate the server infrastructure from the users. Especially in dynamic environments where you need to allow machines on the LAN that are not under control of the company we would advise to make separate VLANs for both servers and users and connect them through a firewall. A possible network design for a medium sized company could be as presented in the next drawing. This network design has the following features: The Palo Alto firewall is the central routing point for all traffic. This means that all traffic, both incoming and outgoing, is scanned. Palo Alto firewalls have the ability to scan for malware and to detect intrusions when the threat prevention license is installed and configured. A secure access to the network is foreseen via the Juniper Secure Access or the newer MAG series Junos Pulse gateway solution. The Juniper Secure Access solution has a number of features to allow access in a very granular way to the network, ranging from basic web access to full network connectivity. Incoming traffic will be scanned by the Palo Alto firewall. The Juniper Secure Access solution can also act as a gateway for activesync traffic. Secure wireless access can be foreseen with the Juniper wireless solution. There are a lot of options in order to allow devices to access specific SSID s. Guest wireless can be integrated. Wireless access from unknown devices can be given access to the network either directly or via the secure access solution in the same way as if they were located outside the network. JunOS Pulse can be used as a VPN client on mobile devices. User network VLAN B... T T SSID Guest VLAN C SSID Mobile VLAN D Juniper wireless controller Private DMZ Server network VLAN A Internet Palo Alto Networks firewall Juniper Secure Access Public DMZ Cisco mail relay White paper design Typical medium size enterprise Reference: 2011xxxx v1.0 Date : 14/02/12 SecureLink nv / Frank Staut By Frank Staut 4

5 Security versus performance, flexibility and manageability Network access Finding the right balance! It depends on the requirements of the company whether security is the most determining factor in the network design or not. In order to have the highest security you should already have taken measures in order to prevent unauthorized access to the wired network via either physical protection, MAC based protection or a full blown 802.1x solution. All devices should be under strict control of the IT department and the necessary security software has to be installed on all devices. At least disk encryption and antivirus/anti-malware software has to be installed. Is the physical network protected? Is DLP software installed on coporate PC s? For companies with these security requirements a concept of BYOD will be very hard as you always will have to compromise on security. In our opinion the only acceptable solution in this case is a remote desktop solution. Even with remote desktop you need to be aware that screen captures can be taken from the host device and as such it is still possible that valuable company data leaks Do you trust network anti-virus/antimalware? The only option is to use a terminal server solution whereby all data remains in the corporate datacenter. For companies that have less strict security rules the main question is whether a network anti-virus is a good alternative for a host based anti-virus? In our design we will always isolate user devices from the server infrastructure via the Palo Alto firewall with an active threat prevention license. If not, then also the remote desktop solution is the only viable solution. If yes, then devices can connect to the network either via wireless or via a VPN. A flexible solution can be implemented as described in our best practices design. The next flowchart determines what type of network access you can allow depending on the existing security policies. It is necessary to make a distinction between only access and all other access. Typically smart phones are used for reading mail. The question that comes to mind is what happens if this device is lost or stolen? For a company it can be important to erase the data as soon as possible as otherwise data loss could occur. Next question is of course whether the device is managed by the company or by an individual? If the device belongs to an individual does he or she allow to install software that can be controlled remotely by the IT department of the company? By Frank Staut 5

6 Mobile device access Do you have DLP software on laptops? Does the user accept to install security software? Does the user accept to install a client certificate? Require Juniper Mobile Security software on devices. Junos Pulse VPN software can be used as well as activesync. There are existing solutions such as the Juniper Pulse Mobile Security Suite that can be integrated in our best practices design. The main question however is, who will manage all the mobile devices? ActiveSync, the protocol that is mainly used for reading s on smart phones, is encrypted natively. However, it only needs a username and password to connect. With the Juniper Secure Access solution we can limit this ActiveSync traffic by checking on a client certificate so that s can only be read from devices that have a valid certificate. Again the question arises, who will manage these certificates? Very important is the management and configuration of the mobile devices. If you allow users to bring their own devices you need to be aware that many users will have questions regarding the configuration of their devices to read their or to access the network. As already mentioned, this part is out of scope for this white paper. Best to only allow activesync Conclusion In this white paper we discussed a number of security issues which arise when you allow unknown devices to the network. Depending on the security requirements of the company you can allow more or less but it is important to understand that with our reference design we can cope with the majority of the possible issues depending on the configuration of the devices. Mobile devices are more vulnerable for lost or theft than laptops, however the security measures that you have to take in order to allow these devices on the network are very similar. By Frank Staut 6

7 About SecureLink: SecureLink is a highly appreciated, Benelux oriented security and networking integrator. Our key differentiators are our obvious networking and security specialization, our vendor partnerships and excellent managed services. Our approach results in a good night s sleep for our customers! About Juniper Networks: Juniper Networks unique blend of security, networking, and management expertise provides customers with the most robust solutions in the industry. In addition, Juniper Networks provides optimized system designs that offer best-of-breed capabilities and deliver a proven total-costof-ownership advantage when compared to competing product offerings. About Palo Alto Networks: Founded by security visionary Nir Zuk, Palo Alto Networks offers real innovation in the firewall by enabling unprecedented visibility and control of applications and content - by user, not just IP address - at up to 10Gbps with no performance degradation. Based on patent-pending App-IDTM technology, Palo Alto s next generation firewalls accurately identify applications - regardless of port, protocol, evasive tactic or SSL encryption - and scan content to stop threats and prevent data leakage. Enterprises can for the first time embrace Web 2.0 and maintain complete visibility and control, while significantly reducing total cost of ownership through device consolidation. About the author: Frank Staut is a senior consultant and co-founder of the company SecureLink. Frank has more than 15 years of experience in the networking and security market space. He holds a degree in engineering and a number of industry certifications. By Frank Staut 17

Deploy secure, corporate access for mobile device users with the Junos Pulse Mobile Security Suite

Deploy secure, corporate access for mobile device users with the Junos Pulse Mobile Security Suite WHITE PAPER Mobile Device Security in the Enterprise Deploy secure, corporate access for mobile device users with the Junos Pulse Mobile Security Suite Copyright 2010, Juniper Networks, Inc. Table of Contents

More information

BYOD: BRING YOUR OWN DEVICE.

BYOD: BRING YOUR OWN DEVICE. white paper BYOD: BRING YOUR OWN DEVICE. On-boarding and Securing Devices in Your Corporate Network Preparing Your Network to Meet Device Demand The proliferation of smartphones and tablets brings increased

More information

SECURING TODAY S MOBILE WORKFORCE

SECURING TODAY S MOBILE WORKFORCE WHITE PAPER SECURING TODAY S MOBILE WORKFORCE Connect, Secure, and Manage Mobile Devices and Users with Junos Pulse and the Junos Pulse Mobile Security Suite Copyright 2011, Juniper Networks, Inc. Table

More information

ADDENDUM 12 TO APPENDIX 8 TO SCHEDULE 3.3

ADDENDUM 12 TO APPENDIX 8 TO SCHEDULE 3.3 ADDENDUM 12 TO APPENDIX 8 TO SCHEDULE 3.3 TO THE Overview EXHIBIT T to Amendment No. 60 Secure Wireless Network Services are based on the IEEE 802.11 set of standards and meet the Commonwealth of Virginia

More information

Securing Corporate Email on Personal Mobile Devices

Securing Corporate Email on Personal Mobile Devices Securing Corporate Email on Personal Mobile Devices Table of Contents The Impact of Personal Mobile Devices on Corporate Security... 3 Introducing LetMobile Secure Mobile Email... 3 Solution Architecture...

More information

Chris Boykin VP of Professional Services

Chris Boykin VP of Professional Services 5/30/12 Chris Boykin VP of Professional Services Future Com! 20 years! Trusted Advisors! Best of brand partners! Brand name customers! 1000 s of solutions delivered!! 1 5/30/12 insight to the future, bringing

More information

Kaspersky Security for Mobile

Kaspersky Security for Mobile Kaspersky Security for Mobile See. Control. Protect. MOVING TARGETS Mobile devices play a key role in connectivity and productivity. But they also introduce new risks to the business: in the past 12 months

More information

Introducing KASPERSKY ENDPOINT SECURITY FOR BUSINESS.! Guyton Thorne! Sr. Manager System Engineering! guyton.thorne@kaspersky.com

Introducing KASPERSKY ENDPOINT SECURITY FOR BUSINESS.! Guyton Thorne! Sr. Manager System Engineering! guyton.thorne@kaspersky.com Introducing KASPERSKY ENDPOINT SECURITY FOR BUSINESS! Guyton Thorne! Sr. Manager System Engineering! guyton.thorne@kaspersky.com 1 Business drivers and their impact on IT AGILITY! Move fast, be nimble

More information

Mobile Workforce. Connect, Protect, and Manage Mobile Devices and Users with Junos Pulse and the Junos Pulse Mobile Security Suite.

Mobile Workforce. Connect, Protect, and Manage Mobile Devices and Users with Junos Pulse and the Junos Pulse Mobile Security Suite. White Paper Securing Today s Mobile Workforce Connect, Protect, and Manage Mobile Devices and Users with Junos Pulse and the Junos Pulse Mobile Security Suite Copyright 2012, Juniper Networks, Inc. 1 Table

More information

Multi-OS Enterprise Mobility Management. Perfectly balancing end-user and corporate needs

Multi-OS Enterprise Mobility Management. Perfectly balancing end-user and corporate needs B U I L T T 0 K E E P Y O U R B U S I N E S S M O V I N G Multi-OS Enterprise Mobility Management Perfectly balancing end-user and corporate needs Enterprise mobility enables organizations to transform

More information

Linksys E2500 Wireless-N Router Configuration Guide

Linksys E2500 Wireless-N Router Configuration Guide Linksys E2500 Wireless-N Router Configuration Guide Revision 1.0 Copyright 2012 Maretron, LLP All Rights Reserved Maretron, LLP 9014 N. 23 rd Ave #10 Phoenix, AZ 85021-7850 http://www.maretron.com Maretron

More information

Division of Information Technology Lehman College CUNY

Division of Information Technology Lehman College CUNY Division of Information Technology Lehman College CUNY Using Lehman s Secure Outgoing (SMTP) Server Updated April 16, 2013 Are you able to receive your Lehman email on your smart phone, laptop or tablet

More information

Mobile Device Strategy

Mobile Device Strategy Mobile Device Strategy Technology Experience Bulletin, TEB: 2012-01 Mobile Device Strategy Two years ago, the Administrative Office of Pennsylvania Courts (AOPC) standard mobile phone was the Blackberry.

More information

Remote Vendor Monitoring

Remote Vendor Monitoring ` Remote Vendor Monitoring How to Record All Remote Access (via SSL VPN Gateway Sessions) An ObserveIT Whitepaper Daniel Petri March 2008 Copyright 2008 ObserveIT Ltd. 2 Table of Contents Executive Summary...

More information

A 3-STEP PLAN FOR MOBILE SECURITY

A 3-STEP PLAN FOR MOBILE SECURITY A 3-STEP PLAN FOR MOBILE SECURITY A 3-STEP PLAN FOR MOBILE SECURITY 2 A complex problem that requires a holistic approach Mobility is here. Mobility is now. Mobility (along with cloud and social media)

More information

SECURE ACCESS TO THE VIRTUAL DATA CENTER

SECURE ACCESS TO THE VIRTUAL DATA CENTER SOLUTION BRIEF SECURE ACCESS TO THE VIRTUAL DATA CENTER Ensure that Remote Users Can Securely Access the Virtual Data Center s Virtual Desktops and Other Resources Challenge VDI is driving a unique need

More information

Access the UTHSCSA Palo Alto Networks (PAN) VPN using Global Protect VPN client and Two Factor Authentication (2FA)

Access the UTHSCSA Palo Alto Networks (PAN) VPN using Global Protect VPN client and Two Factor Authentication (2FA) Access the UTHSCSA Palo Alto Networks (PAN) VPN using Global Protect VPN client and Two Factor Authentication (2FA) Table of Contents Introduction. 1 Determine your Windows Operating System (for software

More information

Check Point Positions

Check Point Positions Check Point Positions - Gartner Magic Quadrants - IDC Market Share Research 2012 Dean J. Whitehair Analyst Relations October 2012 Version 9.0 Updated 10/17/2012 2012 Check Point Software Technologies Ltd.

More information

Bring Your Own Device

Bring Your Own Device Bring Your Own Device Quick Facts About Us 20 th Year Grand Rapids & Royal Oak 25 Staff Approach Vendor Agnostic Non-reseller Professional Services Only Partnerships Microsoft Gold VMware Enterprise Cisco

More information

Wireless Services. The Top Questions to Help You Choose the Right Wireless Solution for Your Business. www.megapath.com

Wireless Services. The Top Questions to Help You Choose the Right Wireless Solution for Your Business. www.megapath.com Wireless Services The Top Questions to Help You Choose the Right Wireless Solution for Your Business Get Started Now: 877.611.6342 to learn more. www.megapath.com Why Go Wireless? Today, it seems that

More information

BEST PRACTICE GUIDE MOBILE DEVICE MANAGEMENT AND MOBILE SECURITY.

BEST PRACTICE GUIDE MOBILE DEVICE MANAGEMENT AND MOBILE SECURITY. BEST PRACTICE GUIDE MOBILE DEVICE MANAGEMENT AND MOBILE SECURITY. With Kaspersky, now you can. kaspersky.com/business Be Ready for What s Next CONTENTS 1. OPEN ALL HOURS...2 Page 2. MOBILE DEVICE MANAGEMENT

More information

Embracing Complete BYOD Security with MDM and NAC

Embracing Complete BYOD Security with MDM and NAC Embracing Complete BYOD Security with MDM and NAC Clint Adams, CISSP, Director, Mobility Solutions Keith Glynn, CISSP, Sr. Technical Solutions Engineer August 22, 2013 Today s Speakers Clint Adams, CISSP

More information

MOBILITY & INTERCONNECTIVITY. Features SECURITY OF INFORMATION TECHNOLOGIES

MOBILITY & INTERCONNECTIVITY. Features SECURITY OF INFORMATION TECHNOLOGIES MOBILITY & INTERCONNECTIVITY Features SECURITY OF INFORMATION TECHNOLOGIES Frequent changes to the structure of enterprise workforces mean that many are moving away from the traditional model of a single

More information

FIREWALL. Features SECURITY OF INFORMATION TECHNOLOGIES

FIREWALL. Features SECURITY OF INFORMATION TECHNOLOGIES FIREWALL Features SECURITY OF INFORMATION TECHNOLOGIES To ensure that they stay competitive and in order to expand their activity, businesses today know it is in their best interests to open up more channels

More information

Connecting an Android to a FortiGate with SSL VPN

Connecting an Android to a FortiGate with SSL VPN Connecting an Android to a FortiGate with SSL VPN This recipe describes how to provide a group of remote Android users with secure, encrypted access to the network using FortiClient and SSL VPN. You must

More information

Did you know your security solution can help with PCI compliance too?

Did you know your security solution can help with PCI compliance too? Did you know your security solution can help with PCI compliance too? High-profile data losses have led to increasingly complex and evolving regulations. Any organization or retailer that accepts payment

More information

Frequently Asked Questions

Frequently Asked Questions Frequently Asked Questions 1) What does SkyBest Internet Guardian do? Prevents e-mail and image spam from reaching your inbox Halts access to dangerous Web pages Stops Web sites from installing dangerous

More information

Using Palo Alto Networks to Protect the Datacenter

Using Palo Alto Networks to Protect the Datacenter Using Palo Alto Networks to Protect the Datacenter July 2009 Palo Alto Networks 232 East Java Dr. Sunnyvale, CA 94089 Sales 866.207.0077 www.paloaltonetworks.com Table of Contents Introduction... 3 Granular

More information

MOBILITY BEYOND BYOD. Jonas Gyllenhammar. Consulting Engineer Junos Pulse solutions

MOBILITY BEYOND BYOD. Jonas Gyllenhammar. Consulting Engineer Junos Pulse solutions MOBILITY BEYOND BYOD Jonas Gyllenhammar Consulting Engineer Junos Pulse solutions BYOD DEFINED Corporate Owned Devices Employee Owned Devices (BYOD) Guest Devices Today's business environment requires

More information

{ipad Security} for K-12. Understanding & Mitigating Risk. plantemoran.com

{ipad Security} for K-12. Understanding & Mitigating Risk. plantemoran.com {ipad Security} plantemoran.com for K-12 Understanding & Mitigating Risk Plante Moran The ipad is in K-12. Since its debut in April 2010, the ipad has quickly become the most popular tablet, outselling

More information

Accessing TP SSL VPN

Accessing TP SSL VPN Accessing TP SSL VPN This guide describes the steps to install, connect and disconnect the SSL VPN for remote access to TP intranet systems using personal notebooks. A. Installing the SSL VPN client Junos

More information

Enabling Secure BYOD How Fortinet Provides a Secure Environment for BYOD

Enabling Secure BYOD How Fortinet Provides a Secure Environment for BYOD Enabling Secure BYOD How Fortinet Provides a Secure Environment for BYOD FORTINET Enabling Secure BYOD PAGE 2 Executive Summary Bring Your Own Device (BYOD) is another battle in the war between security

More information

CHOOSING AN MDM PLATFORM

CHOOSING AN MDM PLATFORM CHOOSING AN MDM PLATFORM Where to Start the Conversation Whitepaper 2 Choosing an MDM Platform: Where to Start the Conversation There are dozens of MDM options on the market, each claiming to do more than

More information

Section 12 MUST BE COMPLETED BY: 4/22

Section 12 MUST BE COMPLETED BY: 4/22 Test Out Online Lesson 12 Schedule Section 12 MUST BE COMPLETED BY: 4/22 Section 12.1: Best Practices This section discusses the following security best practices: Implement the Principle of Least Privilege

More information

Network Security for Mobile Users

Network Security for Mobile Users Network Security for Mobile Users Establishing a Logical Perimeter October 2014 Table of Contents Executive Summary 3 The Enterprise Standard of Security 4 Many Ways to Leave the Network 4 A Requiem for

More information

FileCloud Security FAQ

FileCloud Security FAQ is currently used by many large organizations including banks, health care organizations, educational institutions and government agencies. Thousands of organizations rely on File- Cloud for their file

More information

Viewing Palo Alto Networks as a Strategic Network Security Platform

Viewing Palo Alto Networks as a Strategic Network Security Platform Viewing Palo Alto Networks as a Strategic Network Security Platform IANS WORKING KNOWLEDGE SERIES CASE STUDY 2010 About Capital Region Health Care (CRHC) and Concord Hospital CRHC includes Concord Hospital,

More information

Cisco Virtual Office Express

Cisco Virtual Office Express . Q&A Cisco Virtual Office Express Overview Q. What is Cisco Virtual Office Express? A. Cisco Virtual Office Express is a solution that provides secure, rich network services to workers at locations outside

More information

Securing Wireless Networks for PCI Compliance Using Fortinet s Secure WLAN Solution to Meet Regulatory Requirements

Securing Wireless Networks for PCI Compliance Using Fortinet s Secure WLAN Solution to Meet Regulatory Requirements Securing Wireless Networks for PCI Compliance Using Fortinet s Secure WLAN Solution to Meet Regulatory Requirements Introduction In the wake of many well-documented data breaches, standards such as the

More information

Security. Mobile Device FOR. by Rich Campagna, Subbu Iyer, and Ashwin Krishnan. John Wiley & Sons, Inc. Foreword by Mark Bauhaus.

Security. Mobile Device FOR. by Rich Campagna, Subbu Iyer, and Ashwin Krishnan. John Wiley & Sons, Inc. Foreword by Mark Bauhaus. Mobile Device Security FOR by Rich Campagna, Subbu Iyer, and Ashwin Krishnan Foreword by Mark Bauhaus Executive Vice President, Device and Network Systems Business Group, Juniper Networks WILEY John Wiley

More information

Accessing the Media General SSL VPN

Accessing the Media General SSL VPN Launching Applications and Mapping Drives Remote Desktop Outlook Launching Web Applications Full Access VPN Note: To access the Media General VPN, anti-virus software must be installed and running on your

More information

Security. TestOut Modules 12.6 12.10

Security. TestOut Modules 12.6 12.10 Security TestOut Modules 12.6 12.10 Authentication Authentication is the process of submitting and checking credentials to validate or prove user identity. 1. Username 2. Credentials Password Smart card

More information

The User is Evolving. July 12, 2011

The User is Evolving. July 12, 2011 McAfee Enterprise Mobility Management Securing Mobile Applications An overview for MEEC The User is Evolving 2 The User is Evolving 3 IT s Challenge with Mobile Devices Web 2.0, Apps 2.0, Mobility 2.0

More information

PULSE SECURE FOR GOOGLE ANDROID

PULSE SECURE FOR GOOGLE ANDROID DATASHEET PULSE SECURE FOR GOOGLE ANDROID Product Overview In addition to enabling network and resource access for corporate managed mobile devices, many enterprises are implementing a Bring Your Own Device

More information

Device Independence - BYOD -

Device Independence - BYOD - Charting Our Future Device Independence - BYOD - BYOD: Bring your own device to work day What is BYOD? BYOD (Bring Your Own Device) As distinguished from BYOC (Bring Your Own Computer); or BYOT (Bring

More information

Choosing an MDM Platform

Choosing an MDM Platform Whitepaper Choosing an MDM Platform Where to Start the Conversation 2 Choosing an MDM Platform: Where to Start the Conversation There are dozens of MDM options on the market, each claiming to do more than

More information

Best Practices for Outdoor Wireless Security

Best Practices for Outdoor Wireless Security Best Practices for Outdoor Wireless Security This paper describes security best practices for deploying an outdoor wireless LAN. This is standard body copy, style used is Body. Customers are encouraged

More information

APPENDIX 3 LOT 3: WIRELESS NETWORK

APPENDIX 3 LOT 3: WIRELESS NETWORK APPENDIX 3 LOT 3: WIRELESS NETWORK A. TECHNICAL SPECIFICATIONS MAIN PURPOSE The Wi-Fi system should be capable of providing Internet access directly to a user using a smart phone, tablet PC, ipad or Laptop

More information

Hosted Desktop for Business

Hosted Desktop for Business Your complete guide to Hosted Desktop Hosted Desktop for Business 1 Doc V1.0 Jan 2014 Table of Contents Hosted Desk- 3 Hosted Desktops today... 4 What is a hosted desktop? 4 How does it work? 6 How easy

More information

DYNAMIC SECURE MOBILE ACCESS

DYNAMIC SECURE MOBILE ACCESS DYNAMIC SECURE MOBILE ACCESS DYNAMIC SECURE MOBILE ACCESS Introduction The traditional approach The strong growth in the tablet and smartphone markets in both the consumer and corporate spheres makes it

More information

Symantec Mobile Management Suite

Symantec Mobile Management Suite Symantec Mobile Management Suite One Solution For All Enterprise Mobility Needs Data Sheet: Mobile Security and Management Introduction Most enterprises have multiple mobile initiatives spread across the

More information

FileDrawer An Enterprise File Sharing and Synchronization (EFSS) solution.

FileDrawer An Enterprise File Sharing and Synchronization (EFSS) solution. FileDrawer An Enterprise File Sharing and Synchronization (EFSS) solution. In today s world the potential for ready access to data from virtually any device over any type of network connection creates

More information

EndUser Protection. Peter Skondro. Sophos

EndUser Protection. Peter Skondro. Sophos EndUser Protection Peter Skondro Sophos Agenda Sophos EndUser Solutions Endpoint Usecases Sophos Mobile Solutions Mobile Usecases Endpoint Sophos EndUser Solutions EndUser Protection AV Firewall Application

More information

Total Enterprise Mobility

Total Enterprise Mobility Total Enterprise Mobility Presented by Wlodek Dymaczewski, IBM Wlodek Dymaczewski dymaczewski@pl.ibm.com www.maas360.com Top Enterprise Mobility Initiatives Embrace Bring Your Own Device (BYOD) Migrate

More information

IBM Endpoint Manager for Mobile Devices

IBM Endpoint Manager for Mobile Devices IBM Endpoint Manager for Mobile Devices A unified platform for managing mobile devices together with your traditional endpoints Highlights Address business and technology issues of security, complexity

More information

ClearPass: Understanding BYOD and today s evolving network access security requirements

ClearPass: Understanding BYOD and today s evolving network access security requirements ClearPass: Understanding BYOD and today s evolving network access security requirements ClearPass: Understanding BYOD and today s evolving network access security requirements Chapter 1: Introduction............................

More information

Symantec Mobile Management for Configuration Manager 7.2

Symantec Mobile Management for Configuration Manager 7.2 Symantec Mobile Management for Configuration Manager 7.2 Scalable, Secure, and Integrated Device Management Data Sheet: Endpoint Management and Mobility Overview The rapid proliferation of mobile devices

More information

SAFE-T RSACCESS REPLACEMENT FOR MICROSOFT FOREFRONT UNIFIED ACCESS GATEWAY (UAG)

SAFE-T RSACCESS REPLACEMENT FOR MICROSOFT FOREFRONT UNIFIED ACCESS GATEWAY (UAG) SAFE-T RSACCESS REPLACEMENT FOR MICROSOFT FOREFRONT UNIFIED ACCESS GATEWAY (UAG) A RSACCESS WHITE PAPER 1 Microsoft Forefront Unified Access Gateway Overview 2 Safe-T RSAccess Secure Front-end Overview

More information

VPN Lesson 2: VPN Implementation. Summary

VPN Lesson 2: VPN Implementation. Summary VPN Lesson 2: VPN Implementation Summary 1 Notations VPN client (ok) Firewall Router VPN firewall VPN router VPN server VPN concentrator 2 Basic Questions 1. VPN implementation options for remote users

More information

FortiClient dialup-client configurations

FortiClient dialup-client configurations FortiClient dialup-client configurations By, Rahul Prajapati Sr. Engineer Network Security Sify Technologies Limited Page 1 of 14 Introduction of FortiClient The FortiClient Host Security application is

More information

Junos Pulse: Securing Today s Mobile Life

Junos Pulse: Securing Today s Mobile Life Junos Pulse: Securing Today s Mobile Life An Integrated Approach to Mobile Security, Device and Application Management, and Secure Network Access Today s Mobile Life - Overview Today, our world is digital,

More information

Symantec Mobile Management 7.2

Symantec Mobile Management 7.2 Scalable, secure, and integrated device management Data Sheet: Endpoint Management and Mobility Overview The rapid proliferation of mobile devices in the workplace is outpacing that of any previous technology

More information

Secure Your Mobile Device Access with Cisco BYOD Solutions

Secure Your Mobile Device Access with Cisco BYOD Solutions Solution Overview Secure Your Mobile Device Access with Cisco BYOD Solutions BENEFITS The Cisco Meraki solution (cloud managed) and Cisco BYOD Solution (on-premises management) help you secure multiple

More information

Access the TCNJ Palo Alto Networks VPN using the GlobalProtect VPN client

Access the TCNJ Palo Alto Networks VPN using the GlobalProtect VPN client Access the TCNJ Palo Alto Networks VPN using the GlobalProtect VPN client June 2014 Table of Contents Introduction 1 Determine the Windows Operating System Version 2 Install the GlobalProtect VPN client

More information

Networking for Caribbean Development

Networking for Caribbean Development Networking for Caribbean Development BELIZE NOV 2 NOV 6, 2015 w w w. c a r i b n o g. o r g N E T W O R K I N G F O R C A R I B B E A N D E V E L O P M E N T BELIZE NOV 2 NOV 6, 2015 w w w. c a r i b n

More information

Aerohive and Palo Alto Networks. Partner Solution Brief

Aerohive and Palo Alto Networks. Partner Solution Brief Aerohive and Palo Alto Networks Partner Solution Brief Introduction Now that connecting wirelessly is the norm and users have multiple devices they use for business critical and personal activities, having

More information

The Secure Web Access Solution Includes:

The Secure Web Access Solution Includes: F5 - AppDome Partnership F5 and AppDome share a vision that BYOD users should benefit from secure access to enterprise internal portals for increased productivity. With the exponential growth of mobile

More information

COORDINATED THREAT CONTROL

COORDINATED THREAT CONTROL APPLICATION NOTE COORDINATED THREAT CONTROL Interoperability of Juniper Networks IDP Series Intrusion Detection and Prevention Appliances and SA Series SSL VPN Appliances Copyright 2010, Juniper Networks,

More information

Bring Your Own Device (BYOD) and 1:1 Initiatives: What Questions Do You Need to Answer Before Jumping In?

Bring Your Own Device (BYOD) and 1:1 Initiatives: What Questions Do You Need to Answer Before Jumping In? Bring Your Own Device (BYOD) and 1:1 Initiatives: What Questions Do You Need to Answer Before Jumping In? Bruce Alexander Product Specialist- Wireless and Mobility Bret Straffon Product Specialist-Security

More information

Linksys E2000 Wireless-N Router Configuration Guide

Linksys E2000 Wireless-N Router Configuration Guide Linksys E2000 Wireless-N Router Configuration Guide Revision 1.1 Copyright 2012 Maretron, LLP All Rights Reserved Maretron, LLP 9014 N. 23 rd Ave #10 Phoenix, AZ 85021-7850 http://www.maretron.com Maretron

More information

Q. I use a MAC How do I change my password so I can send and receive my email?

Q. I use a MAC How do I change my password so I can send and receive my email? Password Change FAQ Q. I use a MAC How do I change my password so I can send and receive my email? A. First point a browser to http://www.redlands.edu/passwordmanager and change your password. Afterward,

More information

Tech Brief. Enterprise Secure and Scalable Enforcement of Microsoft s Network Access Protection in Mobile Networks

Tech Brief. Enterprise Secure and Scalable Enforcement of Microsoft s Network Access Protection in Mobile Networks Tech Brief Enterprise Secure and Scalable Enforcement of Microsoft s Network Access Protection in Mobile Networks Introduction In today s era of increasing mobile computing, one of the greatest challenges

More information

RAP Installation - Updated

RAP Installation - Updated RAP Installation - Updated August 01, 2012 Aruba Controller Release 6.1.3.2 The Controller has several wizards that can guide you through a variety of configuration processes. On the Configuration tab

More information

Enterprise Mobility as a Service

Enterprise Mobility as a Service Service Description: Insert Title Enterprise Mobility as a Service Multi-Service User Management for Mobility 1. Executive Summary... 2 2. Enterprise Mobility as a Service Overview... 3 3. Pricing Structure...

More information

Dramatically simplifying voice and data networking HOW-TO GUIDE. Bundle Quick Start Guide

Dramatically simplifying voice and data networking HOW-TO GUIDE. Bundle Quick Start Guide Dramatically simplifying voice and data networking HOW-TO GUIDE Bundle Quick Start Guide 2 edgebox How-To Guide - Table of Contents Scope of the Quick-Start Guide...3 edgebox bundles...3

More information

Embracing BYOD. Without Compromising Security or Compliance. Sheldon Hebert SVP Enterprise Accounts, Fixmo. Sheldon.Hebert@fixmo.

Embracing BYOD. Without Compromising Security or Compliance. Sheldon Hebert SVP Enterprise Accounts, Fixmo. Sheldon.Hebert@fixmo. Embracing BYOD Without Compromising Security or Compliance The Mobile Risk Management Company Sheldon Hebert SVP Enterprise Accounts, Fixmo Sheldon.Hebert@fixmo.com New Realities of Enterprise Mobility

More information

MOBILIZE YOUR WORKFORCE FOR GREATER PRODUCTIVITY

MOBILIZE YOUR WORKFORCE FOR GREATER PRODUCTIVITY PORTTFOLIO BROCHURE MOBILIZE YOUR WORKFORCE FOR GREATER PRODUCTIVITY Multi-OS Enterprise Mobility Management Perfectly balancing end-user and corporate needs Enterprise mobility enables organizations to

More information

Sophos Roadshow. Complete Security Vision

Sophos Roadshow. Complete Security Vision Sophos Roadshow Complete Security Vision Reconized leader Over 25 years of experience Data protection experts Global company with local presence 100 million users trust Sophos Reputation for highest quality

More information

BEST PRACTICES IN BYOD

BEST PRACTICES IN BYOD 1 BEST PRACTICES IN BYOD Addressing BYOD Challenges in the Enterprise Whitepaper 2 Best Practices in BYOD Bring Your Own Device (BYOD) offers many potential advantages: enhanced productivity, increased

More information

Why you need. McAfee. Multi Acess PARTNER SERVICES

Why you need. McAfee. Multi Acess PARTNER SERVICES Why you need McAfee Multi Acess PARTNER SERVICES McAfee Multi Access is an online security app that protects all types of devices. All at once. The simple monthly subscription covers up to five devices

More information

2. From a control perspective, the PRIMARY objective of classifying information assets is to:

2. From a control perspective, the PRIMARY objective of classifying information assets is to: MIS5206 Week 13 Your Name Date 1. When conducting a penetration test of an organization's internal network, which of the following approaches would BEST enable the conductor of the test to remain undetected

More information

SA Series SSL VPN Virtual Appliances

SA Series SSL VPN Virtual Appliances SA Series SSL VPN Virtual Appliances Data Sheet Published Date July 2015 Product Overview The world s mobile worker population passed the 1 billion mark in 2010 and will grow to more than 1.3 billion by

More information

Significance of the Entrepreneurial Company of the Year Award

Significance of the Entrepreneurial Company of the Year Award Entrepreneurial Company of the Year Firewall Market Global, 2010 Frost & Sullivan s Global Research Platform Frost & Sullivan is entering its 50th year in business with a global research organization of

More information

Successful Mobile Deployments Require Robust Security

Successful Mobile Deployments Require Robust Security By: Maribel D. Lopez FIRMS MUST BUILD SECURITY ENABLED MOBILITY Mobility is no longer considered a luxury within enterprise but a critical part of a networking strategy as 9irms look to increase productivity

More information

HomeNet. Gateway User Guide

HomeNet. Gateway User Guide HomeNet Gateway User Guide Gateway User Guide Table of Contents HomeNet Gateway User Guide Gateway User Guide Table of Contents... 2 Introduction... 3 What is the HomeNet Gateway (Gateway)?... 3 How do

More information

Cisco Small Business ISA500 Series Integrated Security Appliances

Cisco Small Business ISA500 Series Integrated Security Appliances Q & A Cisco Small Business ISA500 Series Integrated Security Appliances Q. What is the Cisco Small Business ISA500 Series Integrated Security Appliance? A. The Cisco Small Business ISA500 Series Integrated

More information

Addressing BYOD Challenges with ForeScout and Motorola Solutions

Addressing BYOD Challenges with ForeScout and Motorola Solutions Solution Brief Addressing BYOD Challenges with ForeScout and Motorola Solutions Highlights Automated onboarding Full automation for discovering, profiling, and onboarding devices onto both wired and wireless

More information

Please note that in VISA s vernacular this security program for merchants is sometimes called CISP (cardholder information security program).

Please note that in VISA s vernacular this security program for merchants is sometimes called CISP (cardholder information security program). Introduction This document serves as a guide for TCS Retail users who are credit card merchants. It is written to help them become compliant with the PCI (payment card industry) security requirements.

More information

BYOD Networks for Kommuner

BYOD Networks for Kommuner BYOD Networks for Kommuner Simon Tompson Solutions Architect @MerakiSimon About Meraki The recognized leader in Cloud Networking - Thousands of customer networks in over 100 countries worldwide - World

More information

Cyber Essentials Questionnaire

Cyber Essentials Questionnaire Cyber Essentials Questionnaire Introduction The Cyber Essentials scheme is recommended for organisations looking for a base level Cyber security test where IT is a business enabler rather than a core deliverable.

More information

Mobile Device Management for CFAES

Mobile Device Management for CFAES Mobile Device Management for CFAES What is Mobile Device Management? As smartphones and other mobile computing devices grow in popularity, management challenges related to device and data security are

More information

Ensuring the security of your mobile business intelligence

Ensuring the security of your mobile business intelligence IBM Software Business Analytics Cognos Business Intelligence Ensuring the security of your mobile business intelligence 2 Ensuring the security of your mobile business intelligence Contents 2 Executive

More information

NETWORK SECURITY GUIDELINES

NETWORK SECURITY GUIDELINES NETWORK SECURITY GUIDELINES VIRUS PROTECTION STANDARDS All networked computers and networked laptop computers are protected by GST BOCES or district standard anti-virus protection software. The anti-virus

More information

Network Security. Mike Trice, Network Engineer mtrice@asc.edu. Richard Trice, Systems Specialist rtrice@asc.edu. Alabama Supercomputer Authority

Network Security. Mike Trice, Network Engineer mtrice@asc.edu. Richard Trice, Systems Specialist rtrice@asc.edu. Alabama Supercomputer Authority Network Security Mike Trice, Network Engineer mtrice@asc.edu Richard Trice, Systems Specialist rtrice@asc.edu Alabama Supercomputer Authority What is Network Security Network security consists of the provisions

More information

Parallels Remote Application Server v14

Parallels Remote Application Server v14 Parallels Remote Application Server v14 Solutions Guide October 21, 2015 Copyright 1999-2015 Parallels IP Holdings GmbH and its affiliates. All rights reserved. Parallels IP Holdings GmbH Vordergasse 59

More information

Empowering BYOD and Mobile Security in the Enterprise. Jeff Baum, APAC Managing Director

Empowering BYOD and Mobile Security in the Enterprise. Jeff Baum, APAC Managing Director Empowering BYOD and Mobile Security in the Enterprise Jeff Baum, APAC Managing Director Growth of Mobile Mobile worker population will reach 1.3 Billion in 2015 Source: IDC Worldwide Mobile Worker Population

More information

Secure Your Mobile Workplace

Secure Your Mobile Workplace Secure Your Mobile Workplace Sunny Leung Senior System Engineer Symantec 3th Dec, 2013 1 Agenda 1. The Threats 2. The Protection 3. Q&A 2 The Mobile Workplaces The Threats 4 Targeted Attacks up 42% in

More information

Securing mobile devices in the business environment

Securing mobile devices in the business environment IBM Global Technology Services Thought Leadership White Paper October 2011 Securing mobile devices in the business environment By I-Lung Kao, Global Strategist, IBM Security Services 2 Securing mobile

More information

Microsoft Outlook 2013 & 2010. Microsoft Outlook 2007. Microsoft Outlook 2003. Windows Live Mail 2012 & 2011. MAC Mail. Mozilla Thunderbird

Microsoft Outlook 2013 & 2010. Microsoft Outlook 2007. Microsoft Outlook 2003. Windows Live Mail 2012 & 2011. MAC Mail. Mozilla Thunderbird How to configure your WorldPath email address in various mail applications Microsoft Outlook 2013 & 2010 Microsoft Outlook 2007 Microsoft Outlook 2003 Windows Live Mail 2012 & 2011 MAC Mail Mozilla Thunderbird

More information

Cyber Essentials. Test Specification

Cyber Essentials. Test Specification Cyber Essentials Test Specification Contents Scope of the Audit...2 Assumptions...3 Success Criteria...3 External systems...4 Required tests...4 Test Details...4 Internal systems...7 Tester pre-requisites...8

More information