Managing Mobile Devices in a Corporation

Transcription

1 Managing Mobile Devices in a Corporation Wallace Lam Senior Regional Product Manager Regional Product Management, Mobility Solution Asia Pacific & Japan

2 Agenda Typical Corporation requirements on managing mobile. What technology can address these requirements. How to implement BYOD. 2

3 According to our experience, our customers need Service IT Org : I need to allow my end user to access corporate on mobile device, and I can selective wipe corporate from end user device without a complete device wipe. 3

4 According to our experience, our customers need Service IT Org : I need to allow my end user to access corporate on mobile device, and I can selective wipe corporate from end user device without a complete device wipe. Access intranet website. IT Org : I need to allow my end user to access company intranet website, I don t want to setup VPN profile on end user mobile because it is difficult to manage VPN setting on mobile. 4

5 According to our experience, our customers need Service IT Org : I need to allow my end user to access corporate on mobile device, and I can selective wipe corporate from end user device without a complete device wipe. Access intranet website. IT Org : I need to allow my end user to access company intranet website, I don t want to setup VPN profile on end user mobile because it is difficult to manage VPN setting on mobile. Anti-malware(anti-virus) protection for Android IT Org : End user device may access corporate network, and corporate information will store on the device (dataat-rest). I need to provide anti-malware protection on Android. 5

6 According to our experience, our customers need Service IT Org : I need to allow my end user to access corporate on mobile device, and I can selective wipe corporate from end user device without a complete device wipe. Access intranet website. IT Org : I need to allow my end user to access company intranet website, I don t want to setup VPN profile on end user mobile because it is difficult to manage VPN setting on mobile. Anti-malware(anti-virus) protection for Android IT Org : End user device may access corporate network, and corporate information will store on the device (dataat-rest). I need to provide anti-malware protection on Android. Distribute and secure App(in-house developed or 3 rd party) to mobile IT Org : I plan to develop App or leverage 3 rd party app to enhance end user productivity, I need a way to deploy, secure and manage Apps on mobile. 6

7 How technology can help you? Service Leveraging sandbox App on common mobile platform (ios and Android) as a container to store corporate on device with different security policy. 1. SaaS and On-premise deployment option. 2. End user enroll device, install Symantec Secure app and get Profile from Server 4. (Optional) EAS traffic proxy 3. End user access Server via EAS push. 7

8 How technology can help you? Access intranet website. By leveraging Secure Browser App, and Secure Proxy system to build per-app level secure tunnel from mobile into your internal website. DMZ Intranet SSL Secure Proxy Intranet Website 8

9 What can we get from technologies? Flexible on-premise or SaaS technology Distribute and secure App(in-house developed or 3 rd party) to mobile Leveraging Enterprise App store to deploy and secure in-house app or 3 rd party app. 9

10 How to implement BYOD? Not to collect personal information (Device location, IMEI..etc). We need certain control on the device such as app install, full device wiping in case end user lose the device, however I don t want to collect and store personal information in my system. 10

11 How to implement BYOD? IT can selective wipe the corporate information on BYOD device, complete device wiping is not acceptable. IT need flexible wiping technology, full device wiping is only for lose device, if end user leaves company or they want to selective remove corporate content on their device, selective wiping should be supported and easy to use. 11

12 How to implement BYOD? Per user licensing model is better than Per device licensing model because end user may use different device for their work. End user has their own choice of device and quite often end user will use more than one device to work, per user and un-limit device license can help IT to save cost in long run. 12

13 How to implement BYOD? Need to separate corporate information/app from personal information/app on BYOD device. No one want the corporate data is being shared to unknown location such via consumer-base file sharing app. 13

14 How to implement BYOD? Maintain device security, Android device is open platform, end user can install apps from unknown source, these apps maybe malware. 14

15 Andriod Madware and Malware Trends Report 2013H1 The report is available on Symantec Connect. 15

16 Andriod Madware and Malware Trends Report 2013H1 16

17 Mobile Insight Intelligence: Security Security score: includes disposition confidence and attributes Score Known Good (Trusted App) High-Confidence Good Low-Confidence Good Neutral/Unknown Low-Confidence Bad High-Confidence Bad Known Bad Attributes App prevalence App first seen date Signer (publisher) prevalence Signer first seen date Uses premium services Contains a root exploit 17

18 Mobile Insight Intelligence: Greyware PII / Privacy Leaks Phone # Leaks Contacts Leaks Call Log Leaks SMS Logs Leaks Pictures Leaks Microphone Audio Leaks Location Leaks Calendar Leaks Browser History Leaks Bookmarks Leaks IMEI / IMSI Leaks Device Info Leaks Settings Info Annoyances In-context ads Notification bar ads Shortcut ads Bookmark ads SMS inbox ads Changes home page Changes ring tone 18

19 Mobile Insight Intelligence: Performance Performance Reflects battery drain while the app is in the foreground Reflects battery drain while the app is in the background Reflects cellular bandwidth usage (relative to other apps) This App does the following: GPS Directions - Does not permit your device to enter sleep mode, reducing battery life - Continually runs the app in the background, reducing battery life - High bandwidth usage 19

20