Plan & Deliver Secure BYOD with Enterprise Mobile Management Suril Desai VP, Engineering
75% of Enterprises support BYOD 2 Copyright 2013 CA. All rights reserved.
Worldwide Smartphone Growth continues 3 Copyright 2013 CA. All rights reserved.
Growth of Mobility in Enterprise 350M work devices In 2016, 350M employees will use smartphones 200M will bring their own. - Forrester 32% growth Projected Enterprise Mobility Management spending CAGR 2011-2016 (IDC) Mobile spend will reach $1.3 trillion as the mobile apps market reaches $55 billion in 2016. - Forrester USD $1.3 trillion 4 Copyright 2013 CA. All rights reserved.
New Challenges in enabling a Mobile Enterprise Portable Data Problem Limited control over mobile devices accessing corporate data Lack of visibility Monitoring and managing the new mobile Infrastructure is challenging Rapid Device proliferation & BYOD Difficult to keep up with the sheer volume of mobile devices requiring management Managing Mobile Operations & Support Difficult to keep up with all the new device types needing to be managed 5 Copyright 2013 CA. All rights reserved.
BYOD View from the CIO office We need to increase efficiencies...and be mobile to IT Operations Employees I want to use my device... with apps BYOD Efficiently manage devices, distribute apps Enable working from anywhere any time Increase productivity by enabling mobile enterprise access Save CAPEX by enabling BYOD Remove constraints & deliver more innovative apps Build richer customer engagement Customers & Markets 6 Copyright 2013 CA. All rights reserved. We need an App for that
The Enterprise Mobility Landscape Enterprise Mobility Management CA MDM CA MAM CA MCM CA MEM DEVICE APPLICATION CONTENT EMAIL Lifecycle management solutions for mobile devices Management of mobile applications and granular, app-level policies Solutions for simple, secure and intuitive access to content anywhere, on any device Secure email access with native email experience Comprehensive solution for device, app, email and content 7 Copyright 2013 CA. All rights reserved.
CA Mobile Device Management
BYOD Use Cases 1 John Smith Joins ABC Corp. John uses CA MDM Self Service portal and installs CA MDM CA MDM server verifies John s identity and configures the device and pushes mobile Apps 2 3 John is productive accessing corporate resources (in less than 60 seconds) in the office and on the road 4 John loses his phone, locates via Self service portal and locks and optionally deletes the corporate app/data John moves to a different dept within the company and all the new app and config is automatically delivered 5 6 John leaves the company. CA MDM server automaticall y removes config/corp app installed IT admin has full access to corporate services consumed and telecom expenses incurred 7 Self Service Enterprise Apps Email Server Wireless 9 Copyright VPN Server WiFi 2013 CA. All rights reserved. Directory servers CABI Reports CABI analytics
CA Mobile Device Management (MDM) MANAGE Remote wipe/lock Application blacklist Manage by policy Telecom Expense Management PROVISION User-friendly enroll Zero-touch Enterprise App Store VPP support SECURE Policy enforcement Quarantine jail-broken devices Email security, access control SUPPORT Track devices / Apps Keep Apps up-to-date OTA updates, config Flexible Deployment SaaS or On-Premise 10 Copyright 2013 CA. All rights reserved.
Enterprise and Public App Distribution itunes App Store like user experience Smartphones are all about Apps Blacklist and whitelist apps per company policy Customizable App Storefront Ease of access Enterprise and public app store Automatic, and optional install of enterprise Apps Auto Upgrade notifications Categorize apps by type 11 Copyright 2013 CA. All rights reserved.
CA MDM Key Advantages Highly scalable architecture, On-premise or SaaS Most extensive device support including Windows PCs Rich & extensible policy architecture to group users on geography, hierarchy Optional Relay server to avoid firewall holes Enterprise integration with LDAP, certificate authority, Gmail, Exchange 365 Restrict email access to CA MDM managed devices Self-service portal to empower end user to self-enroll, under 60 secs Extensive analytics using CA s BI platform Telecom expense management (TEM) 12 Copyright 2013 CA. All rights reserved.
Business Analytics Data at your finger tips CA Business Intelligence (CABI) Integration Real time insights in to mobile environment Governance in real time Identify non compliant OS/Patching Access extensive reports Web Interface, SAP BI, SAP Explorer Mobile App 13 Copyright 2013 CA. All rights reserved.
CA MDM Differentiated and Comprehensive Offering Architecture Multi-tenant Highly scalable and highly available Peak traffic control/bandwidth throttling Access based on Role Multi OS support including Windows desktops Extensive logging Customizable SSP/App branding Oracle and SQL Support Security On-device encryption Device and user authentication Backup and restore for desktops Remote lock and selective/complete wipe Rooted and jail broken device detection Selective or full device wipe Full BYOD freedom Device Diversity & Windows Desktop Management ios/android, Samsung SAFE & BlackBerry support Support Windows XP to 7, 32bit & 64bit OS Extensive scripting Lightweight agent on desktop PC File and software distribution Inventory and asset management Desktop analytics Integration with Client Auto (ITCM) Holistic view of enterprise endpoints Single Admin console to view both enterprise liable and BYOD inventory (HW/SW) Combined reporting/analytics Enterprise Integration Certificate Authorities (SCEP, PKI) Directory services (LDAP/AD) Email (Exchange 365 and Gmail) VPN (L2TP, PPTP, IPsec, Juniper, Sonic wall, Aruba, Cisco, F5 SSL and Checkpoint) Wi-Fi (WEP, WPA, WPA Enterprise - TLS, TTLS, EAP, PEAP) Configuration and Profiles Extensible policy definition for enrollment, session, application & configuration Certification integration Geo-based provisioning and configuration Flexible Policy definitions Self-Service Registration, unregister and activation Locate a device Clear passcode, lock and wipe Auto-registration via LDAP credential Remove control Device info Integration with Google maps App requests Analytics Full CA Business Analytics (BA) support Reports access via mobile and web based Extensive and extendible reporting Compliancy mobile dashboard Application mobile dashboard Application device dashboard Mobile App Store Easy to use enterprise and public app store HTML and native app support White and black listing (extended for Samsung Android platform) Volume purchase program 14 Copyright 2013 CA. All rights reserved.
CA Mobile App Management
CA MAM Enables Security, Control, Management Addresses BYOD Needs Control Who can access apps Limit Distribution, Enforce Authentication & SSO Secure What apps may access Device Feature Blocking: GPS, Contacts, Camera, Email Control Where & When apps are accessed Geo-Fencing, Time-Fencing, Network-Fencing Secure How apps access data Add encryption for data at-rest & in-flight, Require VPN Manage apps remotely Force Updates, Lock Apps, Selectively Wipe Apps 16 Copyright 2013 CA. All rights reserved.
CA MAM Provides Fine-Grained App Security Features Centrally Managed for BYOD Office GeoFence Multi-Factor Auth VPN-Only No Contacts Access Required Update No Public Wifi 8am 6pm Only No Camera No Copy/Paste Auth Required App Data Encrypted 17 Copyright 2013 CA. All rights reserved.
Manage Internal Apps and 3 rd -party Apps SDK or App Wrapping SOFTWARE DEVELOPMENT KIT APP WRAPPING Include security code within the application Implemented during app development Implemented by developers Place a layer of security and control around the application Security implemented after app development Implemented by IT Security administrators 18 Copyright 2013 CA. All rights reserved.
19 Copyright 2013 CA. All rights reserved.
20 Copyright 2013 CA. All rights reserved.
21 Copyright 2013 CA. All rights reserved.
22 Copyright 2013 CA. All rights reserved.
23 Copyright 2013 CA. All rights reserved.
CA Mobile Content Management
The Problem: employees are swimming in content & apps, all w/o mobile security Corporate Network Content Enterprise Cloud 25 Copyright 2013 CA. All rights reserved.
The Solution: CA Mobile Content Management Key values: 1. Unified mobile access to disparate content repositories 2. Collaboration over disparate content with other users 3. Cross device access to the content 4. Security of, and control over, enterprise content 26 Copyright 2013 CA. All rights reserved.
MAM Screenshots 27 Copyright 2013 CA. All rights reserved.
MAM Screenshots 28 Copyright 2013 CA. All rights reserved.
MAM Screenshots 29 Copyright 2013 CA. All rights reserved.
CA Mobile Email Management
What is CA MEM? Protect confidential data within mobile inbox essential for BYOD Securely deliver content to email endpoints (Mobile, Outlook, Web) Secure content delivery by email within and outside the enterprise Complements CA-DLP or as stand alone deployment For B2B and B2C email communications 31 Copyright 2013 CA. All rights reserved.
User sends an email How does it work? Email is classified as sensitive Sensitive email is encrypted Encrypted email is delivered CA-DataMinder SaaS Ready Seamless to sender Near seamless for the recipient Mobile devices Enterprise Outlook Cross domain emails Gmail, Yahoo! 32 Copyright 2013 CA. All rights reserved.
Mobile Email Management (MEM) Security of email with native mail client Exchange access control to allow email access only for devices under management Use of existing native mail client for better user experience Content aware: encrypt only what needs to be secured using multi-factor authentication Supports inter-company and intracompany use-cases email Encryption email Control 33 Copyright 2013 CA. All rights reserved.
CA Mobile Services Management
Continued Rise in Business Apps Business Apps continue to gain traction! 29.3% 81% plan to build multi-os business apps Next 3 months, developers plan to build: Field Service, Data Collection, & Forms Apps (46.8%) Productivity Apps (43.9%) Business Intelligence Apps (34.9%) 39% building apps for a private enterprise app store Source: Appcelerator and IDC's Mobile Enterprise Developer Survey, 1Q12 35 Copyright 2013 CA. All rights reserved.
MSM Mobile DevOps App Release Management App Testing API Virtualization App Crash Analytics App Performance Mobile centric DevOps offerings solve many of mobile app development challenges 36 Copyright 2013 CA. All rights reserved.
MSM Mobile App Deployment, Operations & Support Security Performance Operations Support Mobile App Gateway End-to-End App Performance Crash Analytics User Experience Analytics Remote Support Integrated solution to operationalize key aspects of app delivery 37 Copyright 2013 CA. All rights reserved.
MAM Screens MAM Screenshots 38 Copyright 2013 CA. All rights reserved.
MAM Screens MAM Screenshots 39 Copyright 2013 CA. All rights reserved.
Distancing from the silo competition Prevent Data leak to, from and on devices, apps Unified process for all support Data Leak protection Support Desk Integration Identity & Policy Management CA EMM Device and App Risk Profiling Strong Auth Unified Device Handling Single Management point for all resources Protect App and Data with convenient, strong authentication Provide management for mobile and non-mobile. Enterprise and BYOD Eliminate risk by profiling devices and apps at run time 40 Copyright 2013 CA. All rights reserved. 40
CA s Mission for Mobility #1 in mobility management 41 Copyright 2013 CA. All rights reserved.
Q&A
FOR INFORMATION PURPOSES ONLY Terms of this presentation This presentation was based on current information and resource allocations as of April 2013 and is subject to change or withdrawal by CA at any time without notice. Notwithstanding anything in this presentation to the contrary, this presentation shall not serve to (i) affect the rights and/or obligations of CA or its licensees under any existing or future written license agreement or services agreement relating to any CA software product; or (ii) amend any product documentation or specifications for any CA software product. The development, release and timing of any features or functionality described in this presentation remain at CA s sole discretion. Notwithstanding anything in this presentation to the contrary, upon the general availability of any future CA product release referenced in this presentation, CA will make such release available (i) for sale to new licensees of such product; and (ii) to existing licensees of such product on a when and if-available basis as part of CA maintenance and support, and in the form of a regularly scheduled major product release. Such releases may be made available to current licensees of such product who are current subscribers to CA maintenance and support on a when and if-available basis. In the event of a conflict between the terms of this paragraph and any other information contained in this presentation, the terms of this paragraph shall govern. Certain information in this presentation may outline CA s general product direction. All information in this presentation is for your informational purposes only and may not be incorporated into any contract. CA assumes no responsibility for the accuracy or completeness of the information. To the extent permitted by applicable law, CA provides this presentation as is without warranty of any kind, including without limitation, any implied warranties or merchantability, fitness for a particular purpose, or non-infringement. In no event will CA be liable for any loss or damage, direct or indirect, from the use of this document, including, without limitation, lost profits, lost investment, business interruption, goodwill, or lost data, even if CA is expressly advised in advance of the possibility of such damages. CA confidential and proprietary. No unauthorized copying or distribution permitted. 43 Copyright 2013 CA. All rights reserved.