1. Mobile Device Managementterondersteuning van‘Bring Your Own Device’ Novell Congres, Ede, 15 juni 2011 Mark Beermann & Denis de Wit Tmi3 1

2. Agenda 2 Introductie Trends Wat is Mobile Device Management NotifyMDM Demo

4. Wieheeftertoegang tot bedrijfse-mail via zijn/haarpersoonlijke smartphone?

5. Wieheefter GEEN toegang tot Facebook op de corporate PC?3 ✔ ✔ ✔

7. Focus op mobility vanaf 2001

8. Hoofdkwartier in San Jose, CA

9. Development & Technical Support Center in Canfield, OH

10. Huidigeoplossingen:

11. NotifyLink Enterprise Edition – “On-Premise” en “On- Demand”

12. NotifySyncvoor BlackBerry (ActiveSync client voor BlackBerry)

13. Sinds begin 2011:

14. NotifyMDM (Mobile Device Management)

15. On-Premise or On-Demand Version

16. Allemaalbeschikbaar available for 30 dagenevaluatie4

18. Meer dan 1,200 organisatiesgebruiken NotifySync

19. Opgenomen in Gartner Group Magic Quadrant for Wireless Email in de afgelopen 6 jaar

20. Novell GroupWise Partner (8 jaar)

21. Microsoft ActiveSync Licensee5

22. Tmi3: bring your own … alles 6 Access back-office Secure, apps independent of smartphone type Integrate with fixed tel. Access back-office With complete (online) desktop, OS independent, All comms, presence Comms of all types independent of device (fixed, mobile soft), no supplier dependency

23. Trends 7 Eensmartphone is eenmobiele telefoon die uitgebreiderecomputermogelijkhedenbiedt. Een smartphone kanookbeschouwdwordenalseenhandcomputer of pda die tegelijkookeentelefoon is. Maakteengrotegroei door: 76% per jaar In Q4 10 meer smartphones dan PC’s En dannog de tablets ‘Consumerization’ 48% werknemersverbindt smartphone met bedrijfsnetwerk 70% van werknemersgebruiktfunctionaliteitenvoorpersoonlijkgebruik

24. Marktaandelen Europa (%) 8 In eenheden: van 12.1 to 21.2 M

25. Wereldmarkt OS smartphones 2015 (%) 9 Marktaandelenberekend op basis van verkoopaantallen. Bron: IDC Worldwide Quartely Mobile Phone Tracker, 9 juni 2011

27. Op de Android Market zijnerslechts 2 apps vakerdan 500K verkocht, sinds het begin

28. In Apples App Store zijndater al 6 en dat is alleen in VS in 2 maandentijd.

29. Voor Games:

30. Android: 5 betaaldespelletjes 250K

32. Wat is het aantalverloren devices in taxi’s in Londen in 6 maanden? 68.800. Wat is percentage van zakelijkegebruikers die gebruikmaken van consumenten apps? 30% Wat is aantalorganisaties die corporate apps ondersteunen op devices van werknemer? 90% 12 Waarom MDM?

33. 80% bewaartpersoonlijke info op device 25% bank details 10% credit card informatie Cybercriminelenrichtenaandacht van PC nu op smartphones Veelaspecten die wordenaangevallenFiles, Apps, Java, Flash, pdf, Infra-Red, WiFi, 3G, Bluetooth, SMS, MMS… Mobile malware is met 46% toegenomen 20% van gebruikersheefttoestelverloren of is gestolen… minstens 1 keer 13 Mobile Security

34. Vragen die erzijn Is ereen planning in uworganisatieomeenbeleidterealiseren die rekeninghoudt met smartphones zowelzakelijkalsprive? Zijnerrichtlijnen over welke type mobieleapparatenwordengesupportvanuitzakelijke en priveeigendom van de apparaten? Welke support infrastuctuur is ernodigom het potentiaalgroteaantalmobieleapparatentekunnenhanteren? Hoe wordt security beleidgeimplementeerd en afgedwongen over alletypenmobieleapparaten? Hoe houdt men overzicht en inzichtwat en hoe mobieleapparatenwordengebruikt? Kan security, beleidsregels en management gedifferentieerdwordentussenzakelijk en priveeigendom? Is er support voor self-service beheervoorallemobielegebruikersom helpdesk support minimaaltehoudenvoor de toestroom van apparaten? Passen de kostenom de toestroom van mobieleapparaten in het budget? Blijft de gekozen MDM oplossingnog steeds werkenalsereenandere e-mail oplossingwordtgekozen, of alsditnaar de cloud gaat? Is ereenwijze van controleomspecifieke apps tebeperkenof testimuleren? 14

35. NotifyMDM Ontworpenom met elk e-mail platform tewerkendat ActiveSync ondersteunt. Ontworpen met kennis en ervaring van 10 jaarmobieletoegang Ontworpenals “Pure Play” Mobile Device Management: alle e-mail en PIM sync via ActiveSync De NotifyMDM thin client is nodigom de mogelijkhedenbeschikbaartemaken. Sommigedeivceskunnenwerkenzonder client. NotifyMDM is beschikbaarals multi-tenant systeem of alsenkelvoudig enterprise systeem. 15

37. BlackBerry OS v4.5 - 6.0 (Requires NotifySync 4.9 and up)

38. webOS devices v1.4.3/1.4.5

39. WM 6.1 & 6.5 and Windows Phone 7

40. Symbian S60, 3rd Edition, v9.1

41. Android v2.2, 2.2.1, 2.3 , and 3.0 (Only Moto XOOM)

42. TouchDown v 6.5 supporting Android v 1.5 and up16 Supported Device Platforms?

43. Wat Is NotifyMDM? 17

44. NotifyMDM Design Goals 18

45. NotifyMDM On-Demand Architecture Novell (GroupWise) DataSync Ipswitch IMail Server Axigen Messaging CommuniGate ProGoogle Premier Apps IceWarp Server Open-Xchange Kerio Connect Scalix Zarafa Hotmail IBM Lotus Domino using IBM Lotus Notes Traveler Zimbra Collaboration Suite Microsoft Exchange 2003, 2007, 2010, Microsoft Online - Live@edu , BPOS, and Office365 Web Based Centralized Management ActiveSync Mail Server Web Based User Self Service Portal Port 80/443 Active Directory Or LDAP Internet Port 389/636 CorporateFirewall Notify Data Center SCEP Server(iOS device SecureAuthentication) Web Based User Self Service Portal 19 (Using NotifySync)

46. NotifyMDM On-Premise Architecture Novell (GroupWise) DataSync Ipswitch IMail Server Axigen Messaging CommuniGate ProGoogle Premier Apps IceWarp Server Open-Xchange Kerio Connect Scalix Zarafa Hotmail IBM Lotus Domino using IBM Lotus Notes Traveler Zimbra Collaboration Suite Microsoft Exchange 2003, 2007, 2010, Microsoft Online - Live@edu , BPOS, and Office365 Web Based Centralized Management ActiveSync Mail Server Web Based User Self Service Portal Port 80/443 Active Directory Or LDAP Internet Port 389/636 CorporateFirewall SCEP Server(iOS device SecureAuthentication) Web Based User Self Service Portal 20 (Using NotifySync)

47. Mobielestrategie Apps nietuitpublieke app store maar uit Enterprise app stores Met kosteninzichtkan de toteleinvesteringmeerwordeningezet met toepassing apps. MDM is de hoeksteen van beheermobieleapparaten. Met TEM wordenkosteninzichtelijkvoorbeheer-beslissingen

48. NotifyMDM Slides For Reference Activity Monitor (2 slides) Smart Devices and Users (3 slides) Viewing User Profiles (4 slides) Systems Management (14 slides) Self Service Portal (2 slides) 22

50. Six Panels for displaying graphs and charts

51. Drag and Drop Functionality to create custom displays

52. Each Panel is expandable to full screen view

53. On Demand Refresh capability of display information

54. Option to save information as .CSV or .XLS files.23

55. 24 Activity Monitor and Alerts Warnings and alerts will be reported with username, time, and message information. Both data grids can be saved to .CSV or .XLS files.

57. Add user

58. Delete user

59. Modify User

60. Search based on field value or wildcard value

61. Data values can be stored in .CSV or .XLS file format25

62. Smart Devices and Users – Choose Visible Columns 26

63. Smart Devices and Users 27 The Add User Wizard toolbar button launches a window that allows the addition of users by using a .CSV file, LDAP server or manually.

64. Smart Devices and Users – User Profile: User Information 28

65. View Profile - Real Time User Device Information Based On Last Device Data Capture 29

66. Smart Devices and Users – User Profile: Location Data 30

67. View Profile – Compliance Data for SMS/MMS and Phone Calls 31

68. Organizational Management 32

70. Policy suites are broken down into policy categories.

71. Yes/No sliders set policies for corporate and personal devices.33

73. User Account Settings – Policy Suite Creation Wizard: Using Sliders 35

75. Policy suites are broken down into policy categories.

76. Yes/No sliders set policies for corporate and personal devices.

77. Separate groups of policies for corporate and personal devices.36

79. User Account Settings – Policy Category: Device Control 38

81. User Account Settings – Policy Category: Security Settings(2) 40

82. User Account Settings – Policy Category: Security Settings(3) 41

84. User Account Settings – Policy Category: iOS Devices (2) 43

89. Schedules are customizable for corporate and personal devices.47

92. Wipe Device

93. Locate Device

94. Get Recovery Password

95. Clear Device

96. Clear Storage Card49

97. NotifyMDM Roadmap NotifyMDM 1.5 release - 04/04/11 Windows Mobile 6.1 & 6.5 Client - 05/25/11 NotifyMDM 1.6 TouchDown integration - 06/22/11 (see description below) NotifyMDM 1.7 Apple Advanced MDM API Support - 07/11/11 NotifyMDM 1.8 Update Manager Improvements - 08/12/11 50

98. Android Update Today, as is, for NL and NMDM, if TD is running on Android 1.5-2.1 it locks TD only. If TD is on 2.2 and above it locks the entire device. Next Release of NotifyMDM Targeted for week of June 22th, 2011 With the TD MDM API you get easier end-user registration - Don’t have to registers TD + NMDM just NMDM. 51

99. NotifyMDM v1.6 Release Highlights Configuration of TouchDown client: Using NotifyMDM an end user will only have to configure the NotifyMDM client application for their Android device which in turn will automatically configure their TouchDown client. Device Signature: Using NotifyMDM administrators can disable making any changes to the ActiveSync device signature supported by TouchDown. (no device spoofing) Device Lock: Using NotifyMDM administrators have the option to lock the entire device on any Android 2.2 and above device while using the TouchDown client. Copy/paste restrictions: Using NotifyMDM administrators can set policies to restrict the user’s ability to cut and paste text and data from corporate email to other applications. Data encryption for device memory and SD card: All email, PIM, and attachment data within TouchDown is encrypted using AES encryption. Certificate-based identity: NotifyMDM administrators can now distribute certificates to authenticate the Touchdown client to corporate resources requiring certificate authentication. Selective wipe: Using NotifyMDM administrators can wipe email and PIM on an Android device without impacting other data on the device or wipe the entire device. S/MIME Signed or Encrypted Email: Using the Touchdown client users will be able to send and receive signed or encrypted S/MIME email messages. 52

100. NotifyMDM v1.7 Release Highlights Implementation of Apple’s Advanced MDM capabilities requiring a cert from Apple for every customer wanting to utilize the MDM functionality. Can install and remove configuration profiles on user’s device in the background without user interaction Can retrieve the list of installed profiles Can install and remove provisioning profiles on user’s device in the background without user interaction Can retrieve the list of provisioning profiles (to determine if user has deleted any of the security specific ones) Can retrieve the list of installed certificates Can retrieve the list of installed third-party apps Can retrieve device statistics and security info Adds selective wipe capability (any email account set up by an NMDM system ) or full device wipe Can compare installed apps to recommended apps list Interaction with the NMDM server is triggered rather than polling (can reduce battery usage) Can alert admin if user removes MDM profile from the device leaving it unmanaged 53

101. NotifySync For BlackBerry 54

103. It allows a BlackBerry to directly connect to any email platform that supports ActiveSync V2.5, V12.0, and V12.1

104. No BES is required!

105. Uses BIS Data Plan not BES (possible $120 -$180 per user annual savings)

106. NotifySync provides

107. Email and PIM synchronization

108. Folder Support

109. Global Address Lookup

110. Multiple Address Book Support

111. Meeting Invitations (creation and accept/decline)

112. Password Control Features

113. Data at Rest Encryption

114. Device Lock and Wipe

115. Scheduled or Direct Push