What are the technology challenges? What are the new possibilities, applications, services or features that will empower mobile workers even more? Experts on these subjects will cover several interesting topics: Mobile data, Device Management, Mobile Security and Mobile Enterprise Apps. Mobile Device Management by Ulrik Van Schepdael – Mobco

1. Ceci n’est pas un téléphone
…on mobile
Ulrik Van Schepdael uvs@mobco.be

2. What is mobco about
Focus on mobile in business
- empowers the business to achieve more
- allow management to spend efficiently
- provide IT the tools to manage complexity
- consultancy on mobile implementation

3. What is mobco about

4. The Mobile Challenges
What rules ?

5. The Mobile Challenges
(COMPUTERWEEKLY.COM „11) – “Young
professional – also known as „digital natives‟ –
are entering the workforce as fully indoctrinated
mobile device multitaskers. Do no expect them
to work without a
smartphone or similar
device at hand.”
(FACEBOOK OCT „11) – “350 Million Facebook
users are using mobile devices
to access the service – total
number of users is 800 Million.”
Your social life doesn‟t stop at 9 AM

6. The Mobile Challenges
(WIRED Feb 28 „11) – “From the earliest days of
aviation, pilots have relied upon paper maps to
help find their way. Even in an era of GPS and
advanced avionics, you still see pilots lugging
around 20 pounds or more of charts.
But those days are numbered, because maps
are giving way to iPads.
The Federal Aviation Administration is allowing
charter company Executive Jet Management to
use Apple's tablet as an approved alternative to
paper charts. “
(INTEL „11) – “60% use their smartphone for work”
You want to work with your tools

7. The Mobile Challenges
Flexible hours means:
(iPASS Aug „11)
• 64% felt they were better able to balance
their work load with personal commitments
• 51% were more relaxed as a result of this
improved balance
• 54% felt their productivity was substantially
improved
Employees gain flexibility when the
enterprise supports the mobile community

8. The Mobile Opportunities
Make it work and get
control over the basics
Understand the needs
Expand possibilities
… and there are + 1 million apps out there

9. Why using a Mobile Device Management
Management Security User
Control Protect your Expand
Chaos business Experience
Provision, manage
and control Cost control, inventory Everything works, no
communication, mgmt, secured access- time lost and
mobile devices, content-devices self management,
corporate and private consumer experience

10. MDM for IT Security
Security
Protect your
business
Cost control, inventory
mgmt, secured access-
From make restricting devices to
content-devices
enabling mobile data:
Real-time view and manage
Device authentication
Device restrictions

11. MDM for IT operations
Management
Control
Chaos
Provision, manage
and control
communication,
From make lowering workload to
mobile devices,
corporate and private
expanding possibilities:
Real-time view and manage
Roll out at scale
OS agnostic templates

12. The Mobile Opportunities
User
Expand
Experience
Everything works, no
From make it work to expanding
time lost and
self management,
possibilities:
consumer experience
Enterprise specific apps
Documents on the go
Mail, Calendar, Contacts

13. Why using a Mobile Device Management
Management Security User
Control Protect your Expand
Chaos business Experience
Provision, manage
and control Cost control, inventory Everything works, no
communication, mgmt, secured access- time lost and
mobile devices, content-devices self management,
corporate and private consumer experience
Mobile Device Management should answer
all „requirements‟
AND
it should integrate with and „mobilize‟ the existing IT
infrastructure

14. Types of Mobile Device Management
Gartner „11 = 4 types of „MDM‟
1. DIY
2. Profile push aka IPCU 30%
3. Light weight client or Platform MDM 60%
4. Sandbox client 10%

15. Implementation IPCU
Internet DMZ Corporate LAN
Profile Push
&
CAS
ActiveSync Check ActiveSync Mail Server
iPads Empty
Template
Profile
Administrator

16. Balanced
Operational Data User
Support Security Experience
Configure Manual Manual Implement
work work config +
personal
settings
Control NA ActiveSync
check
No
Jailbreak
Manage NA NA
Successful deployment requires balance in each dimension!

17. …

18. Implementation IPCU
Internet DMZ Corporate LAN
VPN access
with user credentials
CAS
(no posture check) ActiveSync Mail Server
VPN
Intranet
iPads Empty
Template
Profile
Administrator

19. Balanced
Operational Data User
Support Security Experience
Configure Manual Manual Implement
work work config +
personal
settings
Control NA ActiveSync Enter
check - no user/passwo
posture VPN rd for VPN
Manage NA NA
Successful deployment requires balance in each dimension!

20. Types of Mobile Device Management
Gartner „11 = 4 types of „MDM‟
1. DIY
2. Profile push aka IPCU 30%
3. Light weight client or Platform MDM 60%
4. Sandbox client 10%

21. Implementation MDM
Internet Firewall DMZ Firewall Corporate LAN
Optional Internal resources
- LDAP
- CA (SCEP)
- BES
Apple Push
Notification Servers
MobileIron VSP
CAS – Mail Server
network access
Intranet

22. configure all mobile devices
VPN
Exchange settings
WiFi settings
2
VPN
iOS restrictions
Certificates

23. Multi-OS lifecycle

24. Balanced
Operational Data User
Support Security Experience
Configure Template Design Opt-in
design
Control Real-time Quarantine Automatic
Manage OTA Adaptive App config
but DLP?
Successful deployment requires balance in each dimension!

25. …
Or Enterprise specific apps

26. Implementation MDM
Internet Firewall DMZ Firewall Corporate LAN
Optional Internal resources
- LDAP
- CA (SCEP)
- BES
MobileIron VSP
CAS – Mail Server
network access
Intranet

27. Implementation scenario
In-House App Custom Public
Connect App App
download MDM MDM Appstore Appstore
App Full Full config Tailored Generic
MDM Server config custom
AppStore
App Adapt Adapt Fixed Fixed
config
change
User Custom MDM Dep App Dep App
authent. authent.
Control yes Yes Yes Yes
Config & presence presence
Access

28. Balanced
Operational Data User
Support Security Experience
Configure Template Design Opt-in
design
Control Real-time Quarantine Automatic
Manage OTA Adapt and Automatic
prevent DL
Successful deployment requires balance in each dimension!

29. Types of Mobile Device Management
Gartner „11 = 4 types of „MDM‟
1. DIY
2. Profile push aka IPCU 30%
3. Light weight client or Platform MDM 60%
4. Sandbox client 10%

30. Implementation Sandbox
Internet Firewall DMZ Firewall Corporate LAN
Optional Internal resources
- LDAP
Sandbox Provider - CA (SCEP)
- BES
Sandbox server
CAS – Mail Server
Juniper
Intranet

31. Balanced
Operational Data User
Support Security Experience
Configure Template Design Opt-in
design
Control Sandbox Quarantine Sandbox
view
Manage OTA Adapt and Login app
prevent DL
Successful deployment requires balance in each dimension!

32. Types of Mobile Device Management
Gartner „11 = 4 types of „MDM‟
1. DIY
2. Profile push aka IPCU 30%
3. Light weight client or Platform MDM 60%
4. Sandbox client 10%

33. Mobile Device Management
DIY IPCU MDM Sandbox
Cost
ROI
CIA
OPS
UX

34. Mobile Device Management
Management Security User
Control Protect your Expand
Chaos business Experience
Provision, manage
and control Cost control, inventory Everything works, no
communication, mgmt, secured access- time lost and
mobile devices, content-devices self management,
corporate and private consumer experience
Balance MDM for your business !

35. Thank you
Contact uvs@mobco.be
Download our free whitepapers on
www.mobco.be
- Build a mobile policy for your company!
- iOS 5 impact on the enterprise!

36. Multi-OS lifecycle
2 Custom Configure
Enforce security and
1
See all devices Support for all OS
configuration and security 5 profile updates silently
Set template config options
3 Configure securely
Control international
6 roaming costs
Multi-OS console for
employee- and company-
Over-the-air, protected Publish in-house apps
owned phones
via SCEP 7 and Web Clips
9 Wipe (full or selective) 4 Roll out at scale
when lost or retired
Control access to
8 ActiveSync
By group and policy

37. Multi-OS lifecycle

38. configure all mobile devices
VPN
Exchange settings
WiFi settings
2
VPN
iOS restrictions
Certificates

39. control all apps and access
VPN
?
Message from your IT
WARNING!
You have installed an
unauthorized application
Enterprise app store “Billy Frontier”.
Please remove
to unblock your email.
In-house apps
2
Control installed apps

40. Implementation scenario
???
Posture Check
LDAP
Policy Server
Intranet
Mail server

41. The Mobile Challenges
Multi OS
Who wins ?

42. Opportunities to Control the Chaos
Management • Accommodate Flexible Work
Control
Chaos
Provision, manage
• Acknowledge Private/Corporate
and control
communication,
mobile devices,
corporate and private
• Forget cables
• Device
• Place
• Network
• Time

43. Opportunities to Protect your Business
Security • Accommodate BYOD
Protect your
business
• Evaluate Risk/Functionality
Cost control, inventory
mgmt, secured access-
content-devices
• Forget LAN
• Device
• Place
• Network
• Time

44. Opportunities to Expand the User Experience
User • Make it work
Expand
Experience
• Expand possibilities
Everything works, no
time lost and
self management,
consumer experience
• Increase productivity
• Device
• Place
• Network
• Time