Smart About Smart Devices: An Introduction to MobileIron

Transcription

1 Smart About Smart Devices: An Introduction to MobileIron

2 Agenda: Smartphones in the enterprise What are the core challenges? How does MobileIron address them? How does MobileIron work? (demo) Q&A / next steps r MobileIron 2-9/21/2012 2

3 The mobile evolution continues 2007 Today 2013 Touch wins Consumer wins Global IT will have to support 3-5 OS 3

4 Today, the definition of MDM is expanding MDM evaluation criteria (1) Multi-OS (3+ OS, native support, common policy) Viability and track record Role-based controls Administration Configuration management Security policy Privacy policy Enterprise integration Business app store Compliance audit Certificates for application and network access Policy exceptions Jailbreak / root detection Scalability MDM server security ios MDM API access Selective wipe of corporate data Reflects evolution from: Basic management Inventory tracking Security for lost devices (lock, wipe, password, encryption) Basic configuration To Mobile as strategic IT service Multi-OS Employee ownership Security for compromised devices Apps and data explosion (1) Vendor Evaluation Criteria from Mobile Device Management 2010: A Crowd of Vendors Pursue Consumer Devices in the Enterprise Gartner, Inc. (Dec 17, 2010) 4

5 Enterprises requirements are maturing Phase 1: Secure Phase 2: Automate Phase 3: Innovate In the face of: User choice and rapid fragmentation Escalating complexity but limited IT resource Business demand and shift in delivery platform Top of mind Security Lost device Compromised device Access control Identity Variable risk tolerance Employee Ownership Liability Data boundary Privacy IT Efficiency Single view across OS Helpdesk cost containment User selfservice Events and actions Apps Rogue app protection Discovery & distribution Line-ofbusiness enablement Q Q Today Q Timeline 5

6 But many core mobile policies are ill-defined User adoption Device choice and ownership litmus test for acceptance Investment and priority of user experience Social contract between end-user and IT who leads, who follows? Security and privacy Trust model (user, data, device) Liability in mixed ownership environments Location/activity monitoring what? when? by whom? Variance by region, function, ownership Application governance Role of the center vs. line-of-business Funding and development Rogue application control Support and end-of-life 6

7 Posture determines risk and consequence (example) Risk-based security Posture check Out-of-policy app Excess usage Risk Low Consequence Minor (alert) Unsupported HW Obsolete policy Medium Moderate (block access) Compromised OS Encryption disabled High Major (destroy data) 7

8 First role: Source of truth for mobile security 1 Baseline security Lock/wipe/password policy Feature lockdown Encryption monitor Secure connectivity [Anti-malware] Traditional MDM ecosystem Posture detection for access control 2 Posture Hardware, firmware versioning OS integrity, data security Application presence and permissions Policy status New MDM 5 Data protection Archiving connector Data loss prevention connector (future) 3 Access control & remediation Notifications and app access control Data destruction Automated workflow 4 Enterprise data boundary Privacy controls (what IT sees) Selective actions (what IT does) Identity (user, device) for apps Agnostic to: Anti-malware / AV VPN Encryption Data loss prevention ediscovery 8

9 Control access: Authorize iphones for corporate usage iphone in Compliance? YES Request Allowed User Request Attempts Denied, to Access Device Corporate not in Allowed List for ActiveSync ActiveSync 9

10 Flexible deployment options Employee BYOD Corporate ios & Android Procur e device Install client Install apps Registe r device IT Partner End user IT Partner End user 10

11 MobileIron provides the enterprise back-end for ios Back-end management platform Notifications Int l roaming detection Cost and quality Service quality (user-driven) In-house app mgmt Device-side APIs and services Access control Installed app inventory Recommendations Enterprise data boundary Certificate delivery Inventory and detection Application lifecycle Advanced security ios 3 ios 4 Zero-touch enforcement Profile delivery Profile creation Policy and settings 11

12 MobileIron: Next-generation mobile management Data-centric platform purpose-built for multi-os Unique architecture enables new enterprise services Enterprise services Secure and manage mobile devices, data, apps Deliver services that matter to end-users Reduce wireless bills Virtual data architecture Five sets of data Focus on mobile data Context (location/quality) Usage and Activity Work Personal Content Applications 360 Device View of Mobile Data MobileIron - Confidential 12

13 Two approaches to iphone management Platform Walled garden / PIM Browser WiFi / VPN App1 App2 / PIM Browser WiFi / VPN App1 App2 Secure Configure Monitor Smartphone viewed by enterprise as Computing platform Extensible Multi-purpose Preserves experience Supports expansion of iphone value Secure Configure Monitor Smartphone viewed by enterprise as Point device Static Single-purpose Limits experience Closed and unsustainable 13

14 Two approaches to iphone management Platform Walled garden / PIM Browser WiFi / VPN App1 App2 / PIM Browser WiFi / VPN App1 App2 Secure Configure Monitor Smartphone viewed by enterprise as Computing platform Extensible Multi-purpose Preserves experience Supports expansion of iphone value Secure Configure Monitor Smartphone viewed by enterprise as Point device Static Single-purpose Limits experience Closed and unsustainable 14

15 MobileIron: Company Overview Experienced team Tier 1 investors Bob Tinker CEO Suresh Batchu, VP Engineering John Donnelly, VP, Sales Mike McCarron Sr Dir, Customer Success Jeff Ratzlaff, Sr Dir, Bus Development Ojas Rege VP Products & Marketing Cisco, Airespace, Vertical Networks Bus Dev, Sales, Product Mgmt Nortel /Alteon Engineering Security/Data Center Symantec, Vontu, Kana, Parametric Sales Enterprise SW and Security Symantec, Vontu, Kana Nokia Enterprise BD, Channels, and Marketing Yahoo Mobile, AvantGo/Sybase, ORCL Product Management, Marketing Founded 2007 (Ser D $57M raised) Early recognition 15

16 MobileIron Architecture Standalone Sentry

17 MobileIron Connected Cloud (Hosted) 9/21/20 17

18 MobileIron Hosted Eval 9/21/20 18

19 MobileIron Architecture Standalone Sentry w/ ISA 9/21/20 19

20 Stage one: Make the phone Enterprise-ready OTA install: Cellular or WiFi Enterprise Policies Applied Encryption / password Lockdown Access control Privacy VPN, WiFi, etc. Apps Installed and Config d Price Exchange Lists Presentations Internal LOB apps Brochures External Media files approved apps Content Delivered Price lists Presentations Brochures Media files Smartphone Is Enterprise Ready MAI MP@W Mobile Activity Intelligence Activated MyPhone@Work Activated 20

21 Full smartphone and data lifecycle with MobileIron Compliance Audit/ Logging SMS archiving Asset Management Multi-OS Inventory e-discovery Applications Push and Publish System Details Operational Status Connection Status Regulatory Activity Usage Patterns Enterprise App Store Service Quality Internal and 3rd Party Location Security and Policy Provisioning Over-the-Air (OTA) Self Service Recommendations* Enterprise Sociograph End of Life Event / Threshold Alerts Selective Wipe Connection & Config Encryption Content/Files Data Migration Cert distribution Anti-virus and DLP* Push and Publish Privacy Settings Inventory Across Mobile Access to PC* Voice, SMS, Data Search and Share* Apps*, Files*, Web* Lost Phone Lock and Wipe Location Tracking Selective Wipe Employee- & Companyowned Content Visibility * = future releases of MobileIron Help Desk Remote Access Recovery/Restore Trouble Spot Detection Broadcast SMS Safety 21

22 Thank you or 22