Z-Push: features, security, management and how to benefit most of Z-Push

Sebastian Kummer

Z-Push – an updateZ-Push 1.5.X packaged:• Available in RPM Fusion for Fedora and RedHat/CentOS• Available in debian as d-push

2011: Z-Push 2 – in development cycle• Alpha 2 to be released• Final scheduled for Q4/2011

Increasing number of downloads 2011• Each final release has avg. of 2000 downloads• Over 50 % new downloads in one year

• 25.000 since Summercamp 2010• Over 80.000 downloads in total

What changed between 1.4 and 1.5

Features• Conflict handling (mobile vs. server)• Full UTF-8 support (ZCP 7 support)• generic LDAP search backend for GAL search

Improvements• Android support (improving since Android 2.2)• Better support of alternative clients, like Moxier Mail & Roadsync• Meeting Request handling (incl. recurrencies)• Task synchronization• Logging with username• IMAP backend

Tasks

Mobile Compatibility List

• Monthly updated • Latest information about Z-Push

• Supported devices• Known issues / device limitations• Version recommendations• External links with additional informations• Changelogs

• Status on Blackberry Enterprise Server

Available at http://z-push.sf.net/compatibility

Device overview

GO for:Apple & Android

Question:Nokia

Do you upgrade ?

• Many servers still run old versions

• Frequent updates: • around 1 release per month: check changelogs• 6 months of 2011: 14 releases (5 stable, 9 betas/RCs)

• RCs are already tested• But we still need productive feedback (!)

• Z-Push 2: lower impact on updates (no new profiles)

Z-Push 2 – some new features

• Synchronization of public folders (some devices)• Access to shared folders• Full device resync from server• Improved Device Management• Policy management (e.g. password enforcment)• Set out-of-office messages from device • Support of “ghosted” fields• Search directly on the server

Z-Push 2 – below the surface

• Improved behaviour in case of errors• Loop detection• More flexible MAPI accesses

• Flexible state management• Managable even with 1000s of mobile

• Better logging• 9 different loglevels• Possibility of creating separate log file per user

Public folder sync

• Only available on mobiles which have „multiple folder sync“

• Contacts, Calendars or E-Mails on mobile

• Most interesting: Company contacts on mobile• Users need „Secretary rights“

• Full access (read, write & delete on all objects) • Z-Push checks these rights while synching

Policy Management in Enterprises• Secure access to sensitive data in levels

1. Remote wipe, passcodes, autolock, passcode history2. Encrypt storage, disallow: camera, “consumer email”, WiFi, Bluetooth, list of (not) approved apps (WM)

• Global Policies for all users• Exceptions for certain users• Disallow access to Z-Push

Downside: device dependency• Policy support depends on individual mobile

• Basic policies (level 1) well supported• Advanced polices (level 2)

• Two major groups• Windows Mobile 6.1 & 6.5 – full support• Others – support policy subset

• Information security still depends on end user

Policy support – simplified overview

* iOS beginning with 3GS encrypts all data by default. Older devices are not allowed in this case.

Policy WM iOSAndroid

2.2Android

2.3.3

Remote wipe

Password & Lockscreen

Disallow Camera & Browser

Disallow Wifi & consumer Mails

Encrypt data storage *

Detailed information will be available in the mobile compatibility list.

Other future features• Autodiscover• Device Management over WS

• 2.0 : Command line tool • Admin interface

• Policy deployment• Resyncs and remote wipe

• User Interface via Webapp• Remote wipe• “Open shared folders on device“

• Security auth log (block after too many failed logins)

Demo

Public folders on mobileProvisioning

Resync from server

Thank you for your attention!

More information at:http://z-push.sf.net/forumshttp://z-push.sf.net/trackerhttp://z-push.sf.net/downloadhttp://z-push.sf.net/compatibility

Contact: zpush@zarafa.com