Three Steps to Safe Bring Your Own Device (BYOD)

3 Steps to Safe
Bring Your Own Devices (BYOD)
September 28, 2011
Host and Moderator:
David Krebs, VDC Research
Sponsors;

Welcome
Panelist Introductions
BYOD market trends
Motorola Solutions
Cloudpath Networks
Bradford Networks
Question and Answers
Wrap up
Motorola XOOM and Apple iPad2 giveaway
Must be present to win!
Agenda

How many users are on your network?

How many different device types and OS do you expect to support?

How important is it to distinguish between corporate-owned and employee-owned devices?

What are your concerns about supporting BYOD?

The population of mobile workers is rapidly increasing and has reached over 1 billion workers in 2011.
Mobile workers demanding access to critical (corporate) information to enable real time distributed decision making and transaction processing.
Consumerization driving shift in balance of power from corporate IT to the employee/consumer.
Consequence is influx of personal devices and multiple OS platforms infiltrating enterprise environments.
Large amounts of sensitive corporate data is and will be accessed on these mobile devices.
With growing corporate support of personal devices critical to ensure key enterprise management and support policies that span the device lifecycle.
BYOD : Key Takeaways

Enterprise Mobility Challenges and Opportunities
Benefits &
Business Drivers
Empower employees to be more productive
Improved customer service
Fast, reliable wireless communications
Improved decision making capabilities
Mobilization of business processes and line of business applications
Multiple platform support
Security and device management concerns
BYOD
Application and platform fragmentation
Lifecycle management
Applications deployment and management
Challenges
PRIORITY RANKING

Over 50% of organizations provide some level of support for personal/individual devices
Enterprises Introducing BYOD Policies
Source: 2011 VDC Research survey of 864 mobile decision makers

Mobile & Wireless Solution Requirements Will Differ by Worker Type
Mobile
Worker
Preferred
Device
Target
Applications
Technical
Requirements
Mobile Worker Population
Wireless Email
Dashboards
BI/CI
Mobile CRM
Approvals
Expense Reporting
Workflow Management
Mobile browser
4G+ GPS
Push email
Image capture
Device Management
3rd-Party Apps
Security support
Road Warriors & Executives (Knowledge Workers)
28.2M
Wireless Email
Time & Attendance
Approvals
Workflow Management
Push Email
Active Sync
Application Partitioning
WiFi
Mobile Office Professional (Corridor Warrior)
111.6M
DECT Functionality
WiFi
3rd-Party Apps
Image Capture
Wireless Email
Time & Attendance
Approvals
Workflow Management
Campus Mobile Worker
370.5M
Mobile Browser
3G+ GPS (4G emerging)
Image Capture
Device Management
3rd-Party Apps
Durability/Ruggedness
Time & Attendance
Dispatching
Workflow Management
Vertical Applications
Field Mobile Worker (Task/Line Worker)
196.6M

Organizations Are Moving Beyond Email to Enterprise Applications
Source: 2011 VDC Research survey of 864 mobile decision makers

From on-boarding and policy management to end of life
Device and Application Management Critical to BYOD Success
OUT OF BOX EXPERIENCE
EFFICIENT APP DEPLOYMENT
OTA device provisioning
Software configuration
OTA push of applications and updates
Seamless version control
Deployment Complexity
Application Management
Customer Issues
Device diagnostics
OTA fixes
Validate settings
Security
Remote lock and wipe
Remote Management
Security Management
LOWER TCO
DATA SECURITY

B.Y.O.D
Bring Your Own Device
Considerations & Solution Components
Tajinder (TJ) Maan
Director
Enterprise Networking & Communications (ENC)
Motorola Solutions
Sept 28th, 2011

WiFi Network Considerations
Existing Infrastructure: Corporate SSID + Guest SSID
BYOD – Secure Separate SSID / Corporate SSID?
WLAN Design
What Personal Computing devices today & in future?
802.1x – PEAP / TLS
Pre Shared Key
IT Strategy
Authentication
Access
Control
Device
On-boarding
Role Based Firewall
Access Control Policies
Captive Portal or Email
Auto device configuration

Compliance
On-Boarding
Infrastructure
CONTROLLERS & ACCESS POINTS
MSP AGENT
WiNG5 ROLE BASED FIREWALL &
INTEGRATED WIPS
SmartRF
AirTime Fairness
Smart Band Control
Smart Load Balance
PERFORMANCE & CAPACITY CONTROLS
Hotspot Web Pages
Built in Radius
External LDAP
MOBILITY SERVICES PLATFORM
CAPTIVE PORTAL
Express BYOD Solution
Motorola WiNG5
Motorola MSP
Motorola WiNG 5

Advanced BYOD Solution
Compliance
On-Boarding
Infrastructure
Hotspot Web Pages
Built in Radius
External LDAP
WiNG 5
CAPTIVE PORTAL
CONTROLLERS & ACCESS POINTS
WiNG5 ROLE BASED FIREWALL &
INTEGRATED WIPS
SmartRF
AirTime Fairness
Smart Band Control
Smart Load Balance
PERFORMANCE & CAPACITY CONTROLS
XpressConnect
ON-BOARDING
NEXT GENERATION
NAC
Cloudpath
Bradford
Motorola

Colorado.edu
Kevin Koster
Founder, Technical Lead
Cloudpath Networks

Keys to On-Boarding
Provide Simple Connectivity
Self-Service & Intuitive
Multiple Platforms
Scalable & Sustainable
Without Compromising Security
Protect Users
Protect The Network

SSID Selection
Open
WPA2-Enterprise
Security Considerations
Captive Portal
Integrated
User/Device Authentication
No.
Integrated
Over-The-Air Encryption
Network Authentication
Integrated
No.
No.
Integrated
Standards-Based Policy
Usability Considerations
Ease Of Initial Access
Click to Join.
Requires configuration
Ease of Ongoing Access
Captive Portal Fatigue
Automatic Reauthentication

SSID Selection
Open
WPA2-Enterprise
Captive Portal
Integrated
No.
Integrated
Integrated
No.
No.
Integrated
Click to Join.

XpressConnect On-Boarding
New user connects to open (guest) SSID.
Captive portal provides link for secure network.
XpressConnect configures and moves user.

XpressConnect Capabilities
Credentials (PEAP) or Certs (TLS)
Install Client Certs & Trusted CAs
Interact with Microsoft CA & Others
WPA2-Enterprise & PSK
Differentiate IT-Issued vs. BYOD
Android, Apple iPad, iPhone, iPod
Millions of Users Worldwide
Windows, Mac OS X, Linux

Keys to On-Boarding
Provide Simple Connectivity
Self-Service & Intuitive
Multiple Platforms
Scalable & Sustainable
Without Compromising Security
Protect Users
WPA2-Enterprise
Protect The Network

Bring Your Own Device (BYOD)
Frank Andrus
CTO

25
BYOD and Your Business
Heterogeneous
APPLICATIONS
COMMUNICATIONS
DEVICES
Homogeneous

26
BYOD and Your Business
ACCESS
SECURITY
Striking a Balance
Security vs. Accessibility
Enabling the business while protecting it
Visibility is Crucial
Knowledge of who, what, where, when, how …
Network-wide, right out to point of access

27
Next-Generation NAC
An adaptive network security approach that leverages the entire network environment

28
Visibility and Automation

Stop by and see us at EDUCAUSE 2011
Philadelphia, PA October 18-21
Booth #1739,1741
Booth #2007
Booth #701

http://www.bradfordnetworks.com	165
http://blog.wavelink.com.au	34
http://dk.bradfordnetworks.com	13

Three Steps to Safe Bring Your Own Device (BYOD)

by Bradford Networks on Sep 28, 2011

Accessibility

Categories

Tags

Upload Details

Usage Rights

3 Embeds 212

Statistics

Three Steps to Safe Bring Your Own Device (BYOD) — Presentation Transcript