Modern mobile devices by their capabilities are almost equal to office computers. For working with different types of document or an access to corporate resources, employees often use their own tablets and smartphones ignoring the prohibition of IT service. This BYOD scenario is impossible to avoid. BYOD brings significant risks and often results in confidential data breaches. The usual restrictions are no longer working, businesses are unable to stop employees from bringing personal devices into the workplace, and today every company needs more mobile and flexible solutions.

1. New mobility strategy that provides high level of security access to
corporate information from mobile devices.
Modern mobile devices by their capabilities are almost equal to office computers.
For working with different types of document or an access to corporate
recources, employees often use their own tablets and smartphones ignoring the
prohibition of IT service. This BYOD scenario is impossible to avoid. BYOD brings
significant risks and often results in confidential data breaches. The usual
restrictions are no longer working, businesses are unable to stop employees from
bringing personal devices into the workplace, and today every company needs
more mobile and flexible solutions.
BYOD – a concept, a transitional
form between the classical
desktop and a new working
scheme.
It enables 24/7 secure access to
corporate resources, focus on
information security and
maintaining employee
productivity.
BYOD - bring your own device -
refers to the policy of permitting
employees to bring personally
owned mobile devices (laptops,
tablets, and smart phones) to their
workplace, and to use those
devices to access privileged
company information and
applications.
WorksPad is an enterprise level mobile workplace, which includes file sync and
share, corporate email client, calendar and address book, built-in office tools,
direct mobile-to-mobile file transfer, and screen sharing. WorksPad is designed to
meet the demand in the most popular corporate tools by mobile workers. It
supports the most typical scenarios of remote enterprise file access, emailing,
and working with documents in a highly productive manner, as well as paperless
meetings. Security reinforcements result from mobile client as “all-in-one”
integrated app, manageable policies and server side architecture.

2. MOBILE DEVICE DATA SECURITY
Corporate data isolationе
WorksPad keeps all corporate data on a mobile device inside the isolated app
container, thereby allowing to divide corporate information from personal user
data. Also, the container can be remotely wiped (without any personal data
touching) by the system administrator in case the device was lost or thieved, or
employee was dismissed.
External storage card can’t be used
By design WorksPad mobile application uses only internal device memory. None
of WorksPad data can be placed into external storage. So the user is unable to
detach WorksPad data from the device in a simple way.
Corporate mailbox only
Another one important architectural feature is that WorksPad mobile application
can work with corporate mailbox only. There is no way to connect the application
to any other email service. So corporate emails can be sent and received
exclusively through the corporate mail server. Thus, all email traffic always stays
under the control of corporate security systems, like DLP, antispam, antimalware
systems and others.
Cloudless architecture
WorksPad mobile application doesn’t use any cloud systems. Despite using
owned device, a user has no way to connect cloud storage as a data source for
WorksPad, no way to use non-corporate email service for WorksPad, no way to
get or put any information outside the WorksPad mobile application. All
corporate data always stays inside the corporate secured perimeter.
WorksPad Security Features

3. Independent Security Expertise
WorksPad mobile application was classified as Level 4 (HIGH) application by
Veracode, which is the leading independent provider of cloud-based application
intelligence and security verification services.
SECURITY MANAGEMENT FEATURES
‘Open In’ policy
The system administrator can deny file opening from WorksPad in third party
application, also it’s possible to deny information copying from WorksPad
application to another one. It makes user impossible to put corporate data
outside the WorksPad mobile application.
Password policies
Using the password policies system, the administrator can force WorksPad mobile
application to ask the password every time when the user runs it on the device.
Also, these policies allow the system administrator to permit or deny users to
apply a local password for running application on mobile device.
Other Policies
WorksPad system provides a wide range of security policies and administrative
settings. Among the others, the system administrator can manage which type of
clients is permitted for users. For example, allow to use iOS client only, te system
administrator will make impossible to connect Android devices to WorksPad
infrastructure. Also, WorksPad includes features, which allow the administrator to
restrict documents printing, direct files exchange, disable built-in email client or
function of external links, and many others.
Remote wipe
Remote wipe mechanism allows the system administrator to destroy WorksPad
application container remotely in case the device was lost or thieved, or
employee was dismissed. While all corporate information will be erased from the
device, all user personal data will remain untouched.

4. SERVER-SIDE ARCHITECHTURE AND SECURITY
Corporate infrastructure integration
WorksPad system is an enterprise level product based on Microsoft
infrastructure, so it is oriented to using the general corporate infrastructure
services. WorksPad server uses Active Directory to authenticate users. Also, while
providing access to data sources, WorksPad server uses NTFS permission for
network shares and SharePoint rights for SharePoint libraries. While using
WorksPad mobile application for corporate data access, the user gets no rights
other than ones he has inside the corporate network.
Role-Based Security Model
WorksPad system uses role-based security model which allows the system
administrator to granularly tune access to every administrative feature of the
system. For example, it is easy to create ‘Log View Only’ role for security auditors.
Logs
WorksPad system has an advanced logging mechanism. Logs store all system
event history, error details and allow getting information about all users’
activities.
SSL secured channel
WorksPad uses SSL encryption for all communications between mobile devices
and the corporate network, and also between WorksPad server components.
Thus data is secured when transferring from one component to another.
Demilitarized Zone
WorksPad server part contains special component named ‘Dispatcher’ which
designed to be installed in Demilitarized Zone, to serve connections from mobile
clients. All the following communications, in this case, will occur between the
dispatcher and other WorksPad components. There will be no direct connections
from the mobile client to the internal segment of the corporate network. This
architecture allows the IT-specialists to use any security systems to control all
traffic from mobile devices before it reaches the secure corporate perimeter.

5. EMM / MDM PLATFORMS INTEGRATION
WorksPad mobile application has special editions for the most popular MDM
systems. The customer can easy integrate WorksPad into the existing enterprise
mobility infrastructure. Using WorksPad with any MDM system allows a customer
to build even more secure environment and get some additional security
features. For example, it can be encryption of the application container, or using
VPN connection between the mobile client and the corporate network.
Currently, the product includes the following MDM-specific releases:
WorksPad for Good
Edition for Good is a special edition of WorksPad, which is integrated with Good
Dynamics platform and officially published in Good Marketplace as enterprise
mobile application for iOS secured by Good.
WorksPad for Citrix
Edition for Citrix is integrated with Citrix XenMobile / Worx platform, is Citrix
Ready Worx verified and officially published in Citrix Worx App Gallery as
enterprise mobile application for iOS.
WorksPad for MobileIron
This special edition is deeply integrated with the MobileIron SDK (AppConnect). It
can be deployed and managed by the MobileIron platform. WorksPad for
MobileIron natively supports all of the key AppConnect SDK for iOS capabilities.
WorksPad for Symantec
WorksPad is a member of Symantec Sealed Program with a special edition of
WorksPad for Symantec AppCenter delivered for enterprises on iOS and Android.