Date post: | 26-Jan-2015 |
Category: |
Technology |
Upload: | axle-it |
View: | 103 times |
Download: | 1 times |
LANDesk Software ConfidentialLANDesk Software Confidential
LANDesk Mobility Manager 9.0
November, 2011
Mike Temple, Product Manager
LANDesk Software Confidential
“I have devices coming into my organization that are not compliant, or that I cannot manage.”
Solution: Device Connection Policy!
2
Problem #1 – Unauthorized Devices
Prevent Unmanaged Devices from Connecting
Limit by Device Type
“Grandfather” existing devices
LANDesk Software Confidential
Users get notified that their device has been quarantined.
3
Problem #1 – Unauthorized Devices
Customizable Message
Link to agent install
Support existing processes
LANDesk Software Confidential
“My users have devices that I need to get set up in the system.”
Solution: Simple Enrollment!
4
Problem #2 – Getting devices configured
Profile Policy by User/AD Container
As easy as configuring mail
Installs agent, applies Device Configuration/ Security Policy
LANDesk Software Confidential
“Without touching all the devices, I need to make sure they can get their mail, WiFi, VPN, and are secured.”
Solution: Device Configuration/Security Policy!
5
Problem #3 – Device Configuration/Security
Configure e-mail, WiFi, VPN, and much more
Set Lock, Password strength, Screen Timeout, and much more
Update Policy at will
User-Focused/Policy-Based
LANDesk Software Confidential
Feature/Benefit Eye ChartSupported Devices
iPhone
iPad
Android devices
iPhone
iPad
Android devices
iPhone
iPad
Android devices
iPhone
iPad
Android devices
iPhone
iPad
Android devices
iPhone
iPad
Android devices
iPhone
iPad
Android devices
iPhone
iPad
Android devices
iPhone
iPad
Android devices
BenefitsFeatures
Simplified Enrollment w/ Active Directory and automated certificate
provisioning
User downloads the LANDesk Mobility agent from app store/market and inputs credentials to automatically bring device under management.
Extended hardware & software inventory
Provides extended hardware & software inventory including install applications, policies, memory, battery, and network information.
Capability
Find my phone; location history
Periodic reports on device current location and breadcrumb trail of past locations
Remote lock and wipeEnables lock and wipe command to a remote device; allows selective wipe of PIM data
J ailbreak/ rooting detections reporting
Detects and reports if device is jailbroken/ rooted.
Zero-touch managementUpdates hardware & software, and jailbreak/root status
Administrators can remotely lock or wipe a device if lost or stolen; sensitive PIM data can be removed by administrator.
Specify & invoke all native iOS/ Android policies
Specify and enable the native iOS and Android policies
Supported device policies can be invoked directly from the LANDesk console.
Leverages device platforms’ native push notification
services
Notification service to alert device users about the availability of new resources in Enterprise AppStore or other required user actions.
Ensures users are kept up-to-date with the availability of the most current resources in the Enterprise AppStore or when user action is needed.
Self-service software distribution via Enterprise
App Store
Repository where enterprise resources such as apps, files, videos, and other corporate resources can be accessed
Provides enterprise with a centralize source for providing corporate resources that can be accessed at user discretion.
Enables device user to easily download, install and activate device management capabilities.
Allows administrators to determine if device is compliant, if action should be taken or policies should be distributed.
Allows administrators to determine if device is compliant, if action should be taken or policies should be distributed.
Provides administrator updates without user intervention.
Allows device user to set periodic reports on current and past phone location.
LANDesk Software Confidential
Premium support for iPhone and iPad devices– Full support of iOS 4 MDM API – Zero-touch management
– Simplified enrollment with AD authentication
– Automatic provisioning of certificates (SCEP)
– Extended hardware and software inventory
– Jailbreak detection (9 different tests)
– Utilizes Apple Push Notification Service
– Supports all native iOS policies
– Remote lock & wipe – full or selective (PIM data only)
– Find my phone feature and location history
Apple iOS Support
LANDesk Software Confidential
Accounts – Exchange ActiveSync – IMAP/ POP email – VPN – Wi-Fi – LDAP – CalDAV – CardDAV – Subscribed calendars
Policies – Require passcode – Allow simple value – Require alphanumeric value – Passcode length – Number of complex characters – Maximum passcode age – Time before auto-lock – Number of unique passcodes before reuse – Grace period for device lock – Number of failed attempts before wipe – Control Configuration Profile removal by user
Apple iOS Policy Support Restrictions
– App installation – Camera – Screen capture – Automatic sync of mail accounts while roaming – Voice dialing when locked – In-application purchasing – Require encrypted backups to iTunes – Explicit music & podcasts in iTunes – Allowed content ratings for movies, TV shows,
apps – Safari security preferences – YouTube – iTunes Store – App Store – Safari
Other settings – Certificates and identities – Web Clips – APN settings
LANDesk Software Confidential
Premium support for Android devices– Simplified enrollment with AD authentication
– Automatic provisioning of certificates (SCEP)
– Rooting detection
– Extended hardware and software inventory
– Utilizes push notifications via Google Cloud to Device Messaging
– Zero-touch management
– Supports all Android 2.2+ policies
– Remote lock & wipe
– Find my phone feature and location history
Android Support
LANDesk Software Confidential
Android 2.2+ policies – Lock now – Reset password – Set maximum failed passwords for wipe– Set maximum inactivity time to lock – Set password minimum length – Set password quality – Wipe data1
– Password expiration (number of days)2
– Password history (max number of past passwords stored)2
– Password complex characters required2
– Data Encryption2
1 - Wipes user data on device; does not wipe memory (SD) card
2 - Android 3.0 required
Android Policy Support
LANDesk Software Confidential
“Problems and Incidents arise. I need to remotely manage these devices.”
Solution: Remote Management
11
Problem #4 – Remote Management
Device Location/Breadcrumbs (where allowed by law)
Remote Wipe/Selective Wipe
Remote Lock/Unlock
Remote Password Reset
LANDesk Software Confidential
What it looks like…
LANDesk Software Confidential
What it looks like…
LANDesk Software Confidential
“I need to make sure the correct apps are on the device.”
Solution: LANDesk Mobile LaunchPad
14
Problem #5 – Application Management
Distribute in-house built apps without submitting to the Horizontal App Stores.
Launch links in controlled browser, limiting where a user can surf.
Link to “suggested” apps from the Horizontal App Stores.
Cross-Platform policies.
LANDesk Software Confidential
Start of the LANDesk myIT Initiative– More on that later…
Self-Service approach– Get IT Recommended public apps– Launch web apps in a controlled browser– Install home-grown apps– Documents, Spreadsheets, PDF’s, etc.– Targeted by AD Group
LANDesk Mobile LaunchPad
LANDesk Software Confidential
LANDesk Mobile LaunchPad App Store
style layout Easy to Use Easy to
Navigate
LANDesk Software Confidential
LANDesk Mobile LaunchPad
Launch Documents and content
LANDesk Software Confidential
LANDesk Mobile LaunchPad
Links and link management – control how a user browses
LANDesk Software Confidential
LANDesk Mobile LaunchPad
Launch websites in a controlled browser
IT controls where the user can go
LANDesk Software Confidential
How it works…
LANDesk Software Confidential
The End
fin