Sophos Mobile Control SophSkills Session

Name: Thomas Lippert – Product Management DPG

Date: 17-Feb-2011

2

Market Drivers

More and more corporate users use a smartphone

Smartphones have become small computers with strong

general capabilities

Smartphones are used far beyond the usual PIM functionality

E-Mail access

Corporate application platform

Access to internal information

Smartphones are a new threat vector

3

New Risks from Smartphone use

Device loss

Device theft

Consumer oriented design

Poor governance

Inadequate management

Corporate information access

Large storage capability

Fast wireless speed

4

Sophos Mobile Control

A Mobile Device Management (MDM) solution to provide:

Configuration of the phone incl. all security related settings

Ability to address concerns regarding loss/theft

Ability to support employees’ personal devices (consumerization)

Low IT management costs through self service portal

iPhone Android Win Mobile

Broad mobile platform support

5

High Level Functionality MatrixiPhone/iPAD Android Win Mobile 6.x

Loss/Theft Protection

Y Y Y

Remote Configuration

Y (Y)* Y

Controlled E-Mail Access

Y Y Y

Self Service Portal Y Y Y

Device Status Reporting

Y Y Y

* Additional Android functionality will be added with the next versions

6

Functionality – Loss/Theft Protection

Feature

Remote Lock and/or Wipe

Auto-wipe after a number of failed login attempts

SIM Change Notification

Supported Platforms

Apple iPhone

Google Android

Windows Mobile 6.x

7

Functionality – Remote Device Configuration

Feature

Define password policy and lock period

Install, list and deinstall of apps

Blocking the use of camera, browser, Youtube, …

Other platform specific settings

Supported Platforms

Apple iPhone

(Google Android)

Windows Mobile 6.x

8

Functionality – Controlled E-Mail Access

Feature

Distribution of the Exchange or E-Mail server settings

Mail access controlled via EAS Proxy

Supported Platforms

Apple iPhone

Google Android

Windows Mobile 6.x

9

Functionality – Self Service Portal

Feature

Enabled user can register their phones in a self service portal

No administrator involvement required

E-Mail access only enabled after self-enrolement

User can lock and wipe their phones via the portal

Supported Platforms

Apple iPhone

Google Android

Windows Mobile 6.x

10

Functionality – Device Status Reporting

Feature

Device status view in the Admin GUI

Flexible grouping, filtering and exporting of the device list

Collection of device properties like memory usage, battery level,

IMSI, roaming mode, OS version, …

Supported Platforms

Apple iPhone

Google Android (partly)

Windows Mobile 6.x

11

Mobile Device Client Apps

SMC client apps on Android and Windows Mobile

Distributed over-the-air from SMC server

Autostart at device boot

Minimal user interaction (non intrusive)

Apple iPhone and iPad are controlled

with the build-in management client

12

Screenshot – Admin Interface

13

Questions?