Mobile Devices can access SharePoint Securely. Presentation details MobileIron, Juniper Secure Access and iPad Apps for making the most of SharePoint on your Mobile Device

1. SECURE Mobile Access to SharePoint Mobile Devices (iPads! iPhones! Android!)Access SharePoint

2. SecureMobile Access To SharePoint 1 3 2 What Is The Issue Here? Technology Overview What Did NGC Do? Integrating Policy, Supporting Technology And SharePoint

3. Post PC Issue/ Opportunity Your Users / Customers Want Mobile Access – Non-PC Devices Will Take Over Someday… 1

4. Mobile AccessSharePoint, eMail – Work Resources!! Powerful Smartphones and Tablets Are More Mobile Than Many PCs People Want Mobile Access Now – MORE In Future!!

5. Mobile DevicesShiny New Devices – Few Blackberries… Powerful Inexpensive Devices Old Deployment Models Gone

6. Mobile DevicesHUGE Technical Differences Matter! Closed Basis For Mobile Devices (Apple, Carriers) Very Different From PC Your Employees, Partners, Customers (and Providers) OWN Devices – Not IT! Want Mobile Access (From Home, Coffee Shop, AND On Your Wireless LAN) New Types of Risks and Threats – HUGE Issues With Lost / Stolen Devices App Store Models – “There’s An App For That!!”

7. 2 NGC Our Challenges, Our Solution (So Far) Establish Policy and Technical Controls – Facilitate Adoption (with Proper Security)

8. Critical Security Policies Enrolled Connections Required SSL VPN / ActiveSync Protection Theft / Tamper Protection PIN/Passcodes Required Inactivity Timeout Wipe Data after guesses Device / Business Data Encryption Protect Data On Device Protect Device Backup (iTunes) Remote Wipe For Lost/Stolen Devices “Find My Phone” Ideal…

9. “Nice To Have” Device Policies Simple, Self-Service Deployment Secure But Simple For People “Managed” App Store Links / App Delivery App Blacklist / Whitelist “Manage Device Features” Centrally Camera Allowed / Disallowed? Wireless LAN – Other Configs. One Policy – Across Many Devices iOS, Android, Windows, Etc…

10. Very Important PIN Policy! Can Become Issue – BALANCE Needed Secure But Simple For People Just Long Enough To Work Six to Eight Characters Auto Lock After No Active Use 30 minutes max – Devices Vary Ten Tries – Then Wipe Biz Data Warnings Stop “Butt Dial” No PIN Expiration Controls Not Network (AD) Passwords Those Credentials Embedded?

11. How Can We Enforce This? Mobile Email Access (Addiction?) People NEED Their Email Security/Controls Needed On Devices Protect Data / Control Access Deploy “Email Locks” Tied To MDM MobileIron Sentry for NGC Update Company Policy / Forms Employee Acceptance Needed Agree To Device Management Agree To Possible “Wipe” Enrollment/Controls In Place

12. 3 Demo: Technology Overview NGC Solutions: Device MDM/Policy via MobileIron, SSL VPN via Juniper SA / Junos Pulse

16. Agent Interaction Updates, Profiles, Certificates Report Dropped Calls Check Data Speeds iOS Only Features Links to iTunes App Store App Delivery Direct to iOS

17. iOS “App Store” Links to Apple Store Point to Apps You Select Define/Deliver Internal Apps Without App Store (From Your System)

18. Privacy Issues Mobile Intelligence / Activity Monitoring Features Track Cell Tower Connections / Location of Device Collect Call Logs and All SMS Messages Set To Ignore Calls/SMS and Track “Current Location” Only Concerns About Collecting Data and Controls / Management Not Presently Any Security / Business Requirements

19. Mobile Expense - International Roaming Alerts Detect International Roaming Send Text Message Alert Send Alert to IT Admins Update Plans / Activity

20. Access To SharePoint – Juniper/Junos VPN SSL VPN for PCs Users Already Know It Flexible Authentication RSA SecurdID / AD / etc. Very Good Controls – From Full VPN Tunnel to Simple One Site Link

21. Access To SharePoint – AircreekFilamente Detect International Roaming Send Text Message Alert

22. Filamente Document Library / Previews

23. Filamente Document Actions / Access

24. Filamente Document Actions / Upload Content

25. References Surveys - Sybase SurveyTelenav Survey MobileIron Picking PIN Policy - Perimeter Jaquith Blog - NIST 800-63 iPhone Password Brute Force CNN Money http://money.cnn.com/galleries/2011/technology/1108/gallery.cybersecurity_tidbits/ Dino Dai Zovi -http://trailofbits.com/2011/08/10/ios-4-security-evaluation/

26. POWERPOINT 2010 What’s Your Message?