Putting Operators at the Centre of

Transcription

1 Putting Operators at the Centre of Enterprise Mobile Security Introduction Small and Medium Enterprises make up the majority of firms and employees in all major economies, yet are largely unidentified and unaddressed by operators as enterprise accounts. However, with high adoption of smartphones and tablets, and a significant likelihood of roaming, they present an attractive new target in a saturated market. Today, all enterprises struggle to deal with the implications of multiple mobile devices connecting to their internal networks and are bombarded with a confusing array of IT solutions offering competing visions of a secure working environment for smartphones and tablets. The risks and implications of these mobile devices connecting to their network are all too real. Whether it is the risk of compromised devices, control over cost and appropriate usage, supporting employee-owned devices or achieving compliance for mobile devices, small and medium enterprises (SMEs) need to find a trusted solution, from a trusted supplier, that minimises complexity and cost of ownership. As an operator providing mobile connectivity for enterprise users, you are uniquely placed to provide your SME customers with a hosted enterprise security service that solves their challenges, and builds on your value as a trusted business partner. By deploying AdaptiveMobile s Enterprise Mobile Security Management (MSM) you can now bring to market an easy-to-adopt, own-branded, revenue generating service that allows SMEs to securely achieve the productivity benefits of a mobile and agile workforce, whilst their employees feel their rights to privacy from their employer are being respected.

2 Your enterprise customers are demanding MSM services today Original primary research, carried out on behalf of AdaptiveMobile by both Harris Interactive and Ovum Research, demonstrates the enterprise market is demanding a comprehensive, simple to deploy and use, mobile security management cloud-based service from a trusted operator. The Harris Interactive research spanned more than 1000 businesses around the world and found that 1 in 3 businesses experienced multiple security breaches including hacking and lost company data. Importantly it strongly validated the market opportunity by showing that 72% of enterprises are likely to take the Enterprise MSM service from an operator, 77% agree they are more likely to stay with an operator that offered this service, and 65% agree they may switch to an operator that offered this service. Further research conducted by Ovum demonstrated that 42% of employees who use their own device at work would prefer to have a mobile security service provided to them by a mobile operator, compared with just 30% who preferred their employer. Figure 1 - Security Features for SMEs Feature Device Description Web Policy Controls Full Customizable URL Category, Whitelist, Blacklist control * Malicious site protection * Web Anti-Virus Scanning * VPN-standard VPN-with smart routing Roaming Policy Controls Separate web traffic rules for national, international and Wi-Fi connected users Compromised Device Detection Jailbroken / root device detection Malicious and compromised app detection Application Policy Controls Handset Application Inventory App installation scanning Device Controls Device Lock, Wipe Device restrictions Android Device restrictions ios Reporting and Management A A A A A Predefined categories of website addresses (URLs), e.g. gambling or entertainment, can be selected by the IT administrator so that they are blocked from end user access. In addition, lists of specific URLs or other IP addresses can be always allowed or always blocked. Known malicious web sites are blocked. These sites may be harmful to businesses, perhaps through phishing for sensitive information or containing malware such as viruses, botnets, spyware or Trojans. Cloud based anti-virus scanning is performed by the Enterprise MSM service. Anti-Virus protects your smart mobile device against bots, worms, Trojans, rootkits, spyware and viruses. VPN Service activated when internet access is required. All web traffic is sent over the encrypted VPN connection. This option enables protection from compromised wifi networks. Some applications may specifically bypass VPN services to access local network resources. Smart Routing will pre-screen web requests. Only suspicious web requests are sent through the secure VPN for further security scans. The remaining web requests are safe web requests which are routed directly to the internet bypassing further security scans. VPN-with smart routing and VPN-standard cannot be configured on the same platform at the same time. Selected web sites categories can be blocked. This can be configured for whether users are on their home mobile network, roaming, or using a Wi-Fi connection, or any combination of these. For example, users might be permitted to access streaming media sites, such as YouTube, only when using a Wi-Fi connection, or they could be blocked from accessing such streaming sites when roaming. Detect user devices that are Jailbroken or Rooted and display this status in the users details view of the administrators dashboard. Enterprise MSM performs automatic anti-virus and malware scanning on installed applications. It prompts the user to uninstall any infected applications found during scans. IT Administrators can view which applications are installed on a particular device in the user s details view of the administrator s dashboard. Enterprise MSM performs automatic anti-virus and malware scanning on each newly installed application. It prompts users to uninstall any infected applications found during this scanning. Enterprise MSM allows IT Administrators to lock lost or misplaced mobile devices. If the device has definitely been stolen or lost the IT Administrator can wipe all of the data from the phone. IT Administrators can ensure certain device features are restricted from use. Camera and Bluetooth can be disabled for a particular policy. IT Administrators can ensure certain device features are restricted from use. Camera, screenshot, Safari, itunes and new application installation can be disabled for a particular policy. Policy reporting - scheduled IT Administrators can choose to have report information provided to them on a scheduled basis via . Policy reporting - full access Drill down threat reports IT Administrators can gain security insights based on the policies they have set up. They can select summary and detailed report information views from the easy to navigate dashboard. The intuitive reporting portal allows IT Administrators to select individual reports or users and then drill down for further insight. Corporate policy management portal A self management web portal for use directly by IT Administrators to manage their enterprise s MSM service. Device information Using the reporting and management portals the IT Administrator can view information on individual devices such as device model, operating system and version number. 2 Device version support - Android versions 4.1, 4.2, 4.3 and Apple ios versions 7 and 8 - Android and ios A - Android only * - Available on ios when VPN without smart routing option is used

3 How will your enterprise customers benefit from the Enterprise MSM service? By signing up for the Enterprise MSM service, a new SME customer is able to: deploy security policies for their organisation based on their individual requirements manage the range of devices that an employee will use to access the enterprise secure IT services such as mobile Web and view and respond to all compromised or malware infected devices have full visibility on the usage of devices Also, by using a combined client and cloud approach, it can be used by an enterprise, regardless of which network a mobile user is on. Delivering a Streamlined User Experience For the End User: Employees are provisioned by their corporate administrator, receiving a link to download and install the Enterprise MSM client. The employee will then have to accept the Enterprise MSM connection in order to use the Internet; thereafter they use their phone normally. Enterprise MSM sits in the background offering a secure working environment. Figure 2 Mobile Device User Screen Views 12:00 12:00 12:00 ENTERPRISE MSM ENTERPRISE MSM ENTERPRISE MSM Attention Internet access requires a secure connection. To access the Internet you must turn on Enterprise MSM. CONNECT CLICK TO SECURE OK SECURE YOU ARE NOW PROTECTED 3

4 For the Enterprise Administrator: Each enterprise is able to define their own employee groups, provision devices and policies, and monitor compliance through a secure hosted web portal. Figure 3 Enterprise Administrator Policy Management View Enterprise administrators are able to define which traffic should be inspected and apply a range of protection controls in order to protect enterprise information while avoiding intrusion into permissible personal use of mobile devices. In addition, with powerful reporting capabilities the enterprise administrator can be sure they possess the latest view to assist with securing their mobile workforce. Figure 4 Enterprise Administrator Reporting View 4

5 What you should consider when launching the Enterprise MSM service? There are several steps to launching a successful solution into the market. Key questions to be answered include: How will you build your business case? What segments will you target? What are your growth projections? The business model for AdaptiveMobile Enterprise MSM is not only about incremental ARPU, but can also be strengthened by increased customer retention and acquisition of new enterprise customers. The Enterprise MSM service s feature set allows for multiple SME target segments, allowing for a full proposition portfolio. The initial market sizing will typically be a proportion of your existing enterprise customer base, focussed on those with existing smartphone penetration. However, operators find that as the service covers SOHO and SME, it helps identify and retain contract customers who are not currently registered as enterprise users. What is your preferred deployment option? How can you augment existing capabilities? What do you need to enable your sales channels to promote this service successfully? Will you target new customers with this service? The Enterprise MSM service can be offered on a fully hosted basis to minimise deployment effort, or can be deployed simply within your data centre for full control. In both cases no network integration is required. Some operators will take advantage of the Enterprise MSM capabilities as a white-label service to carry out portal integration, rebranding, combined provisioning and reporting. The Enterprise MSM service supports direct and indirect sales channels, with options for operators to offer reseller / partner branding, service enablement and support, and with sales collateral, training and support materials that can be rebranded. The capability of the Enterprise MSM to offer value to any enterprise user, even when they are using a competitor s network gives you the opportunity to target a competitor s customer base with this solution, with the potential upside of migrating them onto your network in due course. 5

6 Why work with AdaptiveMobile? The Enterprise MSM service is powered by Adaptive Mobile s proven technology, delivering unique benefits for your customers, and giving you competitive advantage against alternative services within your region. AdaptiveMobile s hosted platform provides cost-effective, scalable, multi-tenant security filtering for web and mobile messaging traffic, as well as centralised device and application controls. Advantages include: A deployed, scalable, network-based security platform, proven in operators around the world, and protecting over 1 billion users on a daily basis Proprietary Big-security in-cloud analytics identifying new enterprise security threats including Advanced Persistent Threats (APTs) and botnets, to keep enterprise customers protected against emerging dangers Flexibility in customising the service offering, allowing you to launch different propositions to enterprise segments, e.g. for SOHO, SME, Mid-Market Direct and channel ready, allowing you to market to your existing customer base, and through your existing IT integration and reseller channels What Next? For discussion of typical use cases, overview of AdaptiveMobile s existing deployments or a full walkthrough of operator and enterprise experience, contact your local office: Head Office Ferry House, Lower Mount Street, Dublin 2. Contact: sales@adaptivemobile.com Regional Sales Contact Numbers: US, Canada, Latin America Sales: UK Sales: Middle East Sales: Africa Sales: Asia Sales: European Sales: Regional Operational Support Contact Numbers: UK: Ireland: France: India: US, Canada, Latin America: About AdaptiveMobile AdaptiveMobile is the world leader in mobile security protecting over one billion subscribers worldwide and the only mobile security company offering products designed to protect all services on both fixed and mobile networks through in-network and cloud solutions. With deep expertise and a unique focus on network-to-handset security, AdaptiveMobile s award winning security products provide its customers with advanced threat detection and actionable intelligence, combined with the most comprehensive mobile security capabilities available on the market today. Our sophisticated security as a service portfolio enables our partners and customers to generate revenues, by empowering consumer and enterprises alike to take greater control of their own security. AdaptiveMobile was founded in 2003 and boasts some of the world s largest mobile operators as customers and the leading security and telecom equipment vendors as partners. The company is headquartered in Dublin with offices in the North America, Europe, South Africa, Middle East and Asia Pacific.