Presentation of Sebastian Kummer about Z-Push 2.0 at Zarafa SummerCamp 2011

1. Z-Push: features, security, management
and how to benefit most of Z-Push
Sebastian Kummer

2. Z-Push – an update
Z-Push 1.5.X packaged:
•
Available in RPM Fusion for Fedora and RedHat/CentOS
•
Available in debian as d-push
2011: Z-Push 2 – in development cycle
•
Alpha 2 to be released
•
Final scheduled for Q4/2011
Increasing number of downloads 2011
•
Each final release has avg. of 2000 downloads
•
Over 50 % new downloads in one year
•
25.000 since Summercamp 2010
•
Over 80.000 downloads in total

3. What changed between 1.4 and 1.5
Features
•
Conflict handling (mobile vs. server)
•
Full UTF-8 support (ZCP 7 support)
•
generic LDAP search backend for GAL search
Improvements
•
Android support (improving since Android 2.2)
•
Better support of alternative clients, like Moxier Mail & Roadsync
•
Meeting Request handling (incl. recurrencies)
•
Task synchronization
•
Logging with username
•
IMAP backend
Tasks

4. Mobile Compatibility List
•
Monthly updated
•
Latest information about Z-Push
•
Supported devices
•
Known issues / device limitations
•
Version recommendations
•
External links with additional informations
•
Changelogs
•
Status on Blackberry Enterprise Server
Available at http://z-push.sf.net/compatibility

5. Device overview
GO for:
Apple & Android
Question:
Nokia

6. Do you upgrade ?
•
Many servers still run old versions
•
Frequent updates:
•
around 1 release per month: check changelogs
•
6 months of 2011: 14 releases (5 stable, 9 betas/RCs)
•
RCs are already tested
•
But we still need productive feedback (!)
•
Z-Push 2: lower impact on updates (no new profiles)

7. Z-Push 2 – some new features
•
Synchronization of public folders (some devices)
•
Access to shared folders
•
Full device resync from server
•
Improved Device Management
•
Policy management (e.g. password enforcment)
•
Set out-of-office messages from device
•
Support of “ghosted” fields
•
Search directly on the server

8. Z-Push 2 – below the surface
•
Improved behaviour in case of errors
•
Loop detection
•
More flexible MAPI accesses
•
Flexible state management
•
Managable even with 1000s of mobile
•
Better logging
•
9 different loglevels
•
Possibility of creating separate log file per user

9. Public folder sync
•
Only available on mobiles which
have „multiple folder sync“
•
Contacts, Calendars or E-Mails on mobile
•
Most interesting: Company contacts on mobile
•
Users need „Secretary rights“
•
Full access (read, write & delete on all objects)
•
Z-Push checks these rights while synching

10. Policy Management in Enterprises
•
Secure access to sensitive data in levels
1. Remote wipe, passcodes,
autolock, passcode history
2. Encrypt storage, disallow: camera,
“consumer email”, WiFi, Bluetooth,
list of (not) approved apps (WM)
•
Global Policies for all users
•
Exceptions for certain users
•
Disallow access to Z-Push

11. Downside: device dependency
•
Policy support
depends on individual mobile
•
Basic policies (level 1) well supported
•
Advanced polices (level 2)
•
Two major groups
•
Windows Mobile 6.1 & 6.5 – full support
•
Others – support policy subset
•
Information security still
depends on end user

12. Policy support – simplified overview
Android Android
Policy WM iOS
2.2 2.3.3
Remote wipe
Password & Lockscreen
Disallow Camera &
Browser
Disallow Wifi & consumer
Mails
Encrypt data storage *
* iOS beginning with 3GS encrypts all data by default.
Older devices are not allowed in this case.
Detailed information will be available
in the mobile compatibility list.

13. Other future features
•
Autodiscover
•
Device Management over WS
•
2.0 : Command line tool
•
Admin interface
•
Policy deployment
•
Resyncs and remote wipe
•
User Interface via Webapp
•
Remote wipe
•
“Open shared folders on device“
•
Security auth log (block after too many failed logins)

14. Demo
Public folders on mobile
Provisioning
Resync from server

15. Thank you for your attention!
More information at:
http://z-push.sf.net/forums
http://z-push.sf.net/tracker
http://z-push.sf.net/download
http://z-push.sf.net/compatibility
Contact: zpush@zarafa.com