Deploying Management and Security Agents to Mobile Devices John Engels Adam Licata Scott Jareo Principal Product Manager Sales Engineer Field Enable. Symantec ITS Partners Symantec EM B23 Deploying Mgmt and Security Agents Vision 2012 1
Agenda 1 Symantec MDM Agent Options John Engels 2 Mobile Agent Creation Steps Adam Licata 3 Demo: Building Mobile Agents Adam Licata 4 Deploying Security Agents 5 Summary and Q&A EM B23 Deploying Mgmt and Security Agents Vision 2012 SYMANTEC VISION 2012 2
Why Use an Agent For Mobile Device Management? Agent vs. Agentless Agentless MDM is only an option with ios MDM is a process built into ios, managed from server MDM does not provide all features needed for management Jailbreak status Enhanced inventory (e.g. VPN status) Enterprise presence on desktop EM B23 Deploying Mgmt and Security Agents Vision 2012 SYMANTEC VISION 2012 3
ios Appstore Limitations AppStore Requirements All public apps must come from the Apple AppStore Apps must categorized and behave within certain limits: Most app categories cannot run in the background MDM is not an ios app category Symantec and many MDM vendors choose GPS category Apps cannot be redistributed in the exact same form outside the store EM B23 Deploying Mgmt and Security Agents Vision 2012 SYMANTEC VISION 2012 4
Enterprise Agents for MDM Enterprise App Concept Enterprise signed MDM agents provide enhanced features Enterprise apps have fewer restrictions Enterprises can directly distribute their apps to users under their control Requirements: Join Apple s ios Enterprise Developer Program (not App Developer) Obtain Symantec s unsigned SMM app from server (shown at right) Publish the app with your certificate EM B23 Deploying Mgmt and Security Agents Vision 2012 SYMANTEC VISION 2012 5
Symantec s MDM AppStore Apps vs. Enterprise Apps AppStore App Download from the Apple store Runs as GPS category app Only runs in background in limited ways 5 min after put in background After significant location change with location sharing When triggered by MDM server No Apps tab user triggered app download not available Symantec name and brand Enterprise App Download from a company site Runs as VoIP category app Can run in background via VoIP category allowances- Wakes up on admin set frequency Can leverage location sharing Also supports MDM triggered check-in App tab allows user selection of apps Your name, brand, and look/feel EM B23 Deploying Mgmt and Security Agents Vision 2012 SYMANTEC VISION 2012 6
Customizable Native Agents Symantec Mobile Management SMM Agent for ios (Works with SMM or Odyssey Athena) Nukona Native client for ios Native client for Android EM B23 Deploying Mgmt and Security Agents Vision 2012 SYMANTEC VISION 2012
Building the SMM Agent for ios Prerequisites Mac OS X with XCode 4.2 or above ios Developer Enterprise Program ios Device Optional Custom images (backgrounds, icons, etc.) EM B23 Deploying Mgmt and Security Agents Vision 2012 SYMANTEC VISION 2012
Building the SMM Agent for ios Distribution Requirements Order 1. Create App ID 2. Create Distribution Certificate 3. Create Distribution Provisioning Profile EM B23 Deploying Mgmt and Security Agents Vision 2012 SYMANTEC VISION 2012
Security Agent Options Presentation Identifier Goes Here SYMANTEC VISION 2012 10
Managed Managed & Unmanaged Symantec s Core Mobility Solutions Symantec s advanced mobile solutions are designed to work with or without device management Symantec AppSecure & AppSecure Enterprise Symantec Zone for Business Symantec O 3 Symantec Mobile Security (Nukona) App & Content Security/ Distribution Secure File Collaboration Secure Web Services Access & Single Sign-on Device Security Mobile Management.Cloud (future) SaaS MDM Symantec Mobile Management Mobile Management for SMP Symantec Management Platform onprem MDM Mobile Management for Config Manager Microsoft SCCM on-premise MDM Symantec s Mobile Management Product Line offers enterprise-ready deployment options in the cloud or integrated into key endpoint management environments SYMANTEC VISION 2012 Symantec Advances Enterprise 11 Mo
Deploying Security Agents Android Symantec Mobile Security 7.2 Android agent Windows Mobile Android will be available via: Google Play Enterprise AppStore Windows Mobile Deploy from server Push or pull Mainly embedded use (e.g. barcode scanners, medical devices) ios TBD when Apple gives us APIs EM B23 Deploying Mgmt and Security Agents Vision 2012 SYMANTEC VISION 2012 12
Enterprise App Deployment Options Enterprise Mobile Library Web App Center Presentation Identifier Goes Here SYMANTEC VISION 2012 13
Q&A Presentation Identifier Goes Here SYMANTEC VISION 2012 14
Win the New ipad Discovery Starts Here Get all Four QR Codes for a Chance to Win Go to any of the four designated locations, in any order, to get the discovery code. Scan the QR code and enter your email address. 3 Second Prize Winners (3 entries required) 5 Third Prize Winners (2 entries required) For official drawing eligibility and rules go to: discover.it-solutions-planning.com DISCOVER EM B23 Deploying Mgmt and Security Agents Vision 2012 SYMANTEC VISION 2012
Thank You Presentation Identifier Goes Here SYMANTEC VISION 2012 16