managing remote and mobile workers - veritasvox.veritas.com/legacyfs/online/veritasdata/1505... ·...

1

Managing Remote and Mobile Workers

Adam Licata, Enterprise Mobility SE, TSO

Brian Sheedy, Sr. Principal TEC, Endpoint Management


SYMANTEC VISION 2014

Today’s Workforce

Managing Remote and Mobile Workers 2

• 79% employees favor working remotely

• 87% use a laptop

• 80% use a smartphone

• 49% use a tablet

Source: Gallup Poll 4/30/14 http://www.gallup.com/poll/168794/workers-upside-staying-connected-work.aspx

http://www.gallup.com/poll/168794/workers-upside-staying-connected-work.aspx










http://www.polleverywhere.com/app

http://www.polleverywhere.com/app/help

http://www.polleverywhere.com/multiple_choice_polls/EAV5fWyYw9NQoM3?preview=true#!/my/polls


http://www.polleverywhere.com/app

http://www.polleverywhere.com/app/help

http://www.polleverywhere.com/multiple_choice_polls/PdT3RMRoadL8TS5?preview=true#!/my/polls


Ownership Irrelevance


• BYOD, CYOD, COPE, etc.

• Security requirements do not change

• Protect the data, apps, and resources

• Solution should support multiple models

Source: Gallup Poll 4/30/14 http://www.gallup.com/poll/168794/workers-upside-staying-connected-work.aspx











Manage BYOD and Corporate Devices

6

3

2 1

Un

man

aged

Man

aged

Company Owned Personally Owned

Managed Apps & Data Only

Managed Personal Device Corporate Device

Unmanaged Device

BYOD

Application Management

Identity Management

Device Management

Threat Protection


Identity Management

Threat Protection

Device Management

Threat Protection


Identity Management

Symantec Enterprise Mobility


Productivity vs. and Security


• Users choose path of least resistance to get the job done

• Enable them, don’t disable

• Choose least invasive security approach

• Account for ownership model

Productivity Security


Device Consistency


• Implement security for both mobile and desktop

• Be aware of unique risks to mobile

• Physical access

• Location

• Personal use

• Untrusted App Stores


Focus on Apps


• Cannot assume the device is secure

• Apps handle sensitive data

• At rest

• In motion

• Leverage MAM for mobility

• App wrapping

• Containerization

• Sandboxing


Approaches to App Security

• Done in one of three ways:

1. Encrypted Sandbox

2. Hypervisor

3. Wrapping

• Isolates and encrypts

• Per app container

• Allows/disallows OS or app access in/out of the container

• Most require code edits

• Important!

– Solution re-signs app w/out code change

– No rooting or jailbreaking required

– Integrated access control

Containerization App Wrapping



VPN is not the Answer


• Do not rely on VPN for remote management

• Users do not consistently use VPN

• Causes obsolete inventory/tracking data

• VPN is at the device level, not application level

• BYOD = personal apps accessing corporate networks

VPN Concentrator


Remote Management with Symantec


Mobile Devices (iOS and Android)

• App Center with Secure App Proxy

Endpoint Management (Windows)

• Altiris ITMS with Cloud Enabled Management (CEM)


Symantec Secure App Proxy

Presentation Identifier Goes Here 13

Traffic from Symantec wrapped apps is rerouted to Proxy

Access to Corporate Network from specific corporate apps only

Traffic from personal apps untouched

Personal traffic does not traverse corporate network

Symantec App Proxy allows corp traffic through


Enforce Compliance for Mobile Devices

Presentation Identifier Goes Here 14


Boundaryless Endpoint Management


Common IT challenges


“How do I manage users who rarely connect to the corporate network?”

“How do I manage all the new devices and software coming into my environment?”

“How can I make sure we are not over or under

buying software licenses and are in compliance

with our license agreements?”

“How do I protect my corporate assets and network from

vulnerabilities?”


How does Symantec Endpoint Management address these challenges?


Manage anywhere across remote sites and users

18

• Securely manage users anywhere on the

internet and eliminate the need for

dedicated VPN or leased lines

• Easily support and manage distributed

locations regardless of bandwidth

constraints

• Maximize administrator to managed

device ratios

• Cloud Enabled Management for Windows

Symantec Endpoint Management

Travel Home

Remote Office



Cloud Enabled Management


Internal External DMZ

CeM

Agent

Internet Gateway

Internal Firewall

External Firewall

Gateway blocks

un-trusted

connections

Secure connection No VPN required

Notification Server

(SMP)

Internet


CeM Architecture

Internal External DMZ

CeM

Agents Internet

Gateways

Notification Servers

Internet



Cloud Enabled Management Functionality in ITMS 7.5

21 Managing Remote and Mobile Workers

• CeM for Windows endpoints

• Inventory Gathering

• Software Distribution

• Application Metering

• Patch Management

• Basic Client Tasks

• Hierarchy and Replication



End-to-end software management

22

• Common data model provides a single

place for purchases/contracts, single

definition of software, single interface for

different users

• Advanced reporting supports financial

costs, departmental expense for

chargeback, alerts on renewal activities,

and trending over time

• Automatic harvesting processes

• Single click application virtualization

• Deploy, update, and run SEP




Broad patch management

23

• Support for multiple platforms and over

50 non-Microsoft applications –

including all browsers and plug-ins

• Routine analysis and compliance

enforcement of applied patches

• Advanced analytic reporting and metrics

• Automation routines to simplify process

• Integration with Symantec’s endpoint

security, compliance and data loss

solutions




Data insight for faster remediation and planning

24

• Easily access and share business data

• Measure improvement with key

performance indicators (KPIs)

• Analyze trends over time

• Powerful on-the-fly reporting and charts

• Fast remediation with dynamic,

actionable summaries




Free yourself from the office


iOS Remote Access Console

Consistent experience from the iPad to the Console

Fast access to device summaries

Quickly verify status of policies and tasks

Remediate issues, including remote control

Thank you!

Copyright © 2014 Symantec Corporation. All rights reserved. Symantec and the Symantec Logo are trademarks or registered trademarks of Symantec Corporation or its affiliates in the U.S. and other countries. Other names may be trademarks of their respective owners. This document is provided for informational purposes only and is not intended as advertising. All warranties relating to the information in this document, either express or implied, are disclaimed to the maximum extent allowed by law. The information in this document is subject to change without notice.

26



IT Management Suite

Client Management • Provisioning • Inventory • Software management • Patch management • Application virtualization • Remote management • Reporting and analytics

Server Management • Provisioning • Inventory • Software management • Patch management • VM management • Server monitoring • Reporting and analytics

Asset Management • Asset tracking • Barcode scanning • Contract management • Compliance • Reporting and analytics

Data Loss Prevention Mobile Management

Endpoint Protection Encryption

Complementary Solutions

27 Managing Remote and Mobile Workers


Solution Overview: Mobile Management Suite

App Management Threat Protection Device Management

App Center Unified Management Platform

28 Enterprise Mobility - Customer Update

managing remote and mobile workers - veritasvox.veritas.com/legacyfs/online/veritasdata/1505... ·...

Documents