Z-Push: features, security, management and how to benefit most of Z-Push Sebastian Kummer
Z-Push – an updateZ-Push 1.5.X packaged:• Available in RPM Fusion for Fedora and RedHat/CentOS• Available in debian as d-push2011: Z-Push 2 – in development cycle• Alpha 2 to be released• Final scheduled for Q4/2011 Increasing number of downloads 2011• Each final release has avg. of 2000 downloads• Over 50 % new downloads in one year • 25.000 since Summercamp 2010 • Over 80.000 downloads in total
What changed between 1.4 and 1.5Features• Conflict handling (mobile vs. server)• Full UTF-8 support (ZCP 7 support)• generic LDAP search backend for GAL searchImprovements• Android support (improving since Android 2.2)• Better support of alternative clients, like Moxier Mail & Roadsync• Meeting Request handling (incl. recurrencies)• Task synchronization• Logging with username• IMAP backend Tasks
Mobile Compatibility List• Monthly updated• Latest information about Z-Push • Supported devices • Known issues / device limitations • Version recommendations • External links with additional informations • Changelogs• Status on Blackberry Enterprise Server Available at http://z-push.sf.net/compatibility
Device overview GO for: Apple & Android Question: Nokia
Do you upgrade ?• Many servers still run old versions• Frequent updates: • around 1 release per month: check changelogs • 6 months of 2011: 14 releases (5 stable, 9 betas/RCs)• RCs are already tested • But we still need productive feedback (!)• Z-Push 2: lower impact on updates (no new profiles)
Z-Push 2 – some new features• Synchronization of public folders (some devices)• Access to shared folders• Full device resync from server• Improved Device Management• Policy management (e.g. password enforcment)• Set out-of-office messages from device• Support of “ghosted” fields• Search directly on the server
Z-Push 2 – below the surface• Improved behaviour in case of errors • Loop detection • More flexible MAPI accesses• Flexible state management • Managable even with 1000s of mobile• Better logging • 9 different loglevels • Possibility of creating separate log file per user
Public folder sync• Only available on mobiles which have „multiple folder sync“• Contacts, Calendars or E-Mails on mobile• Most interesting: Company contacts on mobile• Users need „Secretary rights“ • Full access (read, write & delete on all objects) • Z-Push checks these rights while synching
Policy Management in Enterprises• Secure access to sensitive data in levels 1. Remote wipe, passcodes, autolock, passcode history 2. Encrypt storage, disallow: camera, “consumer email”, WiFi, Bluetooth, list of (not) approved apps (WM)• Global Policies for all users• Exceptions for certain users• Disallow access to Z-Push
Downside: device dependency• Policy support depends on individual mobile• Basic policies (level 1) well supported• Advanced polices (level 2) • Two major groups • Windows Mobile 6.1 & 6.5 – full support • Others – support policy subset• Information security still depends on end user
Policy support – simplified overview Android AndroidPolicy WM iOS 2.2 2.3.3Remote wipePassword & LockscreenDisallow Camera &BrowserDisallow Wifi & consumerMailsEncrypt data storage * * iOS beginning with 3GS encrypts all data by default. Older devices are not allowed in this case. Detailed information will be available in the mobile compatibility list.
Other future features• Autodiscover• Device Management over WS • 2.0 : Command line tool • Admin interface • Policy deployment • Resyncs and remote wipe • User Interface via Webapp • Remote wipe • “Open shared folders on device“• Security auth log (block after too many failed logins)
Demo Public folders on mobile Provisioning Resync from server
Thank you for your attention!More information at: http://z-push.sf.net/forums http://z-push.sf.net/tracker http://z-push.sf.net/download http://z-push.sf.net/compatibilityContact: firstname.lastname@example.org
A particular slide catching your eye?
Clipping is a handy way to collect important slides you want to go back to later.