ca mdm marketing presentation
DESCRIPTION
CA Mobile Device Management is the industry leading MDM solution that addresses today's need for a comprehensive and secure BYOD solutionTRANSCRIPT
Enterprise Mobility Management Solutions
Harish Lakshminarasimhan
2 Copyright © 2013 CA. All rights reserved.
20052013
What a difference8 years make.
St Peter’s Square 2005 vs. 2013
Does this look familiar?
3 Copyright © 2013 CA. All rights reserved.
40% of IT executives say they allow their users to access corporate information with their own smartphone...
70% of users say they are already accessing corporate information with their own smartphone
-IDC
Mobility …..its a deluge!
4 Copyright © 2013 CA. All rights reserved.
The mobile enterprise
Today’s employees will be most productive when they
use the device they are most comfortable with.
5 Copyright © 2013 CA. All rights reserved.
“120,000 cell phones are lost annually in Chicago taxi cabs”*
*http://www.micro-trax.com/statistics/
…but, did you know?
“~113 smartphones are stolen or lost every
MINUTE”*
1.6M phones stolen in 2012**
** NY Attorney General’s website
6 Copyright © 2013 CA. All rights reserved.
“How do I protect my corporate data on my mobile device in case it is stolen.”
“How do I ensure what apps and features by employees can and cannot access?”
“How do I manage exploding work-related telecom expenses on my employees’ devices.”
Some Day-Day Use Cases ….
7 Copyright © 2013 CA. All rights reserved.
Increased Productivity
Security, Control, Performance
“Follow IT policies, whichever device or app you
use and what your role permits”
ITUsers
“I just want to do my job. Make it easy for me to
work on ANY device from ANY where!!”
..where both Users and IT have their own expectations!
8 Copyright © 2013 CA. All rights reserved.
CONTENT
Grow business through improved customer engagement and accelerated application delivery
Improve employee productivity and provide a secure mobile work environment
Increase efficiency by mobilizing IT and automating processes
CIO
From the corner office!
IT EMPLOYEES
CUSTOMERS
DEVICE APPS
9 Copyright © 2013 CA. All rights reserved.
CA’s viewpoint on Mobility ….through the CIO lens
DeviceManagement
AppDevelopment
& Distribution
App Management
Operational Support
Email & Content
Management
Identity & Access Management
Security
CONTENTDEVICE APPS
10 Copyright © 2013 CA. All rights reserved.
CA solution portfolio for Enterprise Mobility Enablement
CONTENTDEVICE APPS
DeviceManagement
AppDevelopment
& Distribution
App Management
Operational Support
Email & Content
Management
CA MDM
CA Application Delivery
CA Layer7 API integration
CA MAM
CA App Perf. Management
Nolio
LISA
CA MCM*
CA MEM*
CA Data Protection
CA API Security & Management
Access Control; *Minder
11 Copyright © 2013 CA. All rights reserved.
Mobile Device Management (MDM)
CONTENTDEVICE APPS
DeviceManagement
AppDevelopment
& Distribution
App Management
Operational Support
Email & Content
Management
CA MDM
CA Application Delivery
CA Layer7 API integration
CA MAM
CA App Perf. Management
Nolio
LISA
CA MCM*
CA MEM*
CA Data Protection
CA API Security & Management
Access Control; *Minder
12 Copyright © 2013 CA. All rights reserved.
CA Mobile Device Management
Unmanaged to managed in 90 seconds
Simple, scalable SaaS-based Mobile Device Management #BYOD #BYOT
User-friendly Enterprise App Store and over the air policy management
Near real-time device status, control and telecom expense analytics
Multi device and OS support
13 Copyright © 2013 CA. All rights reserved.
CA Mobile Device Management
MANAGE• Remote wipe/lock• Application
blacklist• Manage by policy• Telecom Expense
Management
SECURE• Policy enforcement• Quarantine jail-
broken devices• Email security,
access control
PROVISION• User-friendly enroll• Zero-touch config• Enterprise App
Store• VPP support
SUPPORT• Track devices /
Apps• Keep Apps up-to-
date• OTA updates,
config
14 Copyright © 2013 CA. All rights reserved.
CA MDM - Manage
Provision Secure Manage Support
• Cross Platform
• Role based enterprise app store
• Users access the latest version of apps needed for business
• Deploy corporate developed Apps
• Deploy wrapped apps
• Mandatory/silent app installations
• App update notifications
Copyright © 2013 CA Technologies
14
15 Copyright © 2013 CA. All rights reserved.
CA MDM - Provision
Provision Secure Manage Support
Copyright © 2013 CA Technologies
15
• Cross platform
• Consistant look and feel end-user self service portal
• BYOD / IT onboarding
• Selective wipe of corporate only data
• Pre configured Apps delivered upon enrollment
16 Copyright © 2013 CA. All rights reserved.
CA MDM - Support
Provision Secure Manage Support
• Platform/App decision support
• Comprehensive device hardware inventory
• Comprehensive software analysis
• Event reporting via MDM Server
• Operations integration
Copyright © 2013 CA Technologies
16
17 Copyright © 2013 CA. All rights reserved.
CA MDM - Secure
Provision Secure Manage Support
• Content security features
• Self service device locate
• Remote Lock/Wipe
• Email remediation for non compliant devices
• Jailbreak/Root detection
• App whitelist / blacklist
• OTA enforcement of security policies
Copyright © 2013 CA Technologies
17
18 Copyright © 2013 CA. All rights reserved.
CA MDM – Multi-tenancy
Hirerachical structure to cater to carriers, MSPs who can in turn provide MDM services across different enterprise
Share common resources across enterprises, providing economies of scale
Super Admin console and a simple wizard to provision and deliver MDM services in matter of minutes
Tenant specific branding for MDM server and customized Mobile MDM App certs, profiles
Impersonation enterprise admin and access any enterprise portal with single login
19 Copyright © 2013 CA. All rights reserved.
Advanced reporting, analytics, and device usage
20 Copyright © 2013 CA. All rights reserved.
What is Unique about CA MDM
CA MDM
Device Diversity (includes Windows desktop)
Highest Scalability and Availability
Cross Product Integration
Extended Analytics/Reporting
21 Copyright © 2013 CA. All rights reserved.
Mobile Application Management
CONTENTDEVICE APPS
DeviceManagement
AppDevelopment
& Distribution
App Management
Operational Support
Email & Content
Management
CA MDM
CA Application Delivery
CA Layer7 API integration
CA MAM
CA App Perf. Management
Nolio
LISA
CA MCM*
CA MEM*
CA Data Protection
CA API Security & Management
Access Control; *Minder
22 Copyright © 2013 CA. All rights reserved.
Roadmap – CA Mobile Application Management
ControlAnalyze
Secure Manage
Crash & defect collection, reporting User satisfaction reporting Dynamic real-time App analytics,
security, risk monitoring
App Authentication, SSO, VPN GeoFencing, TimeFencing Remote app locking, wiping
App wrapping & containerization Data encryption, at-rest, in-motion Detailed App performance reports
Rich SDK providing MAM features Capture & create automated tests Remote control of apps for support Remote live support in-app help
23 Copyright © 2013 CA. All rights reserved.Copyright © 2013 CA Technologies23
24 Copyright © 2013 CA. All rights reserved.Copyright © 2013 CA Technologies24
25 Copyright © 2013 CA. All rights reserved.
Discipline: Content Management
CONTENTDEVICE APPS
DeviceManagement
AppDevelopment
& Distribution
App Management
Operational Support
Email & Content
Management
CA MDM
CA Application Delivery
CA Layer7 API integration
CA MAM
CA App Perf. Management
Nolio
LISA
CA MCM*
CA MEM*
CA Data Protection
CA API Security & Management
Access Control; *Minder
26 Copyright © 2013 CA. All rights reserved.
CA Mobile Content Management
Access controlled content synchronization Seamless mobile access to SharePoint,
DropBox, … ActiveDirectory, LDAP integration Content secured at-rest, in-motion Secure e-mail attachments SaaS or on-premise storage
Content editing, commenting, collaboration Simple note editing, sharing Fine-grained content access, sharing
policies Content-level access rights Remote content wiping
Secure
Collaborate
27 Copyright © 2013 CA. All rights reserved.
Mobile Content Management
28 Copyright © 2013 CA. All rights reserved.
Email access control
Use native mail client
Content aware encryption
Supports inter and intra company email
Mobile Email Management
29 Copyright © 2013 CA. All rights reserved.
CA solution portfolio for Enterprise Mobility Enablement
CONTENTDEVICE APPS
DeviceManagement
AppDevelopment
& Distribution
App Management
Operational Support
Email & Content
Management
CA MDM
CA Application Delivery
CA Layer7 API integration
CA MAM
CA App Perf. Management
Nolio
LISA
CA MCM*
CA MEM*
CA Data Protection
CA API Security & Management
Access Control; *Minder
30 Copyright © 2013 CA. All rights reserved.
EMM is not an island
30
CA EMM
Identity & Policy
Management
Strong Auth
Unified Device
Handling
Device and App Risk Profiling
Support Desk Integration
Data Leak protection
Single Management point for all resources
Protect App and Data with convenient, strong
authentication
Provide management for mobile and non-mobile.
Enterprise and BYOD
Eliminate risk by profiling devices and apps at run time
Unified process for all support
Prevent Data leak to, from and on devices, apps
31 Copyright © 2013 CA. All rights reserved.
Continued Rise in Business Apps
Business Applications continue to gain traction!
• Nearly 81% plan to write to 2 or 3 OS’s, for business apps
• Next 3 months, developers plan to develop:• Field Service, Data Collection, & Forms Apps
(46.8%)
• Productivity Apps (43.9%)
• Business Intelligence Apps (34.9%)
• Nearly 39% plan to write apps for a private enterprise app store
29.3%
32 Copyright © 2013 CA. All rights reserved.
CA’s Mobility Vision
DATADEVICE APPS
Identity & Access Management
Mobile DEVICE
Management
Mobile APPLICATION Management
Mobile CONTENT
EMAIL Management
Security
Addressing TODAY’s challenges Solving TOMORROW’S problems
Mobile DevOPs
Mobile (App) DEPLOYMENT
APPS
Mobile Services Management
Release Mngnt
Testing
API Virtualization
Crash Analytics
Security
Performance
Operations
Support
Services, Support
33 Copyright © 2013 CA. All rights reserved.
Mobility is just an extension of what we do… – Address end-to-end functional areas – Unique in delivering an end-to-end service managed view
Strategic focus and investment leveraging CA leadership positions in cloud, security and management– Strong vision, roadmap and commitment
We are here to help you on all things, Mobility!
Summary
Pulling it all together…
A Real –Life Use Case
35 Copyright © 2013 CA. All rights reserved.
Clinicians are using personally owned iPads for many things– Email– Clinical imaging access– Clinical data
Clinic wants to streamline the prescribing process so that it can be driven quickly from a tablet– Patient history immediately available– Current and previous prescriptions searched and correlated for
contra indications, allergies, prescribing conflicts etc.– Immediate prescription processing – no form filling
Let us imagine a healthcare company…
36 Copyright © 2013 CA. All rights reserved.
Users and their devices
Applications
Needs Assessment
Side-effects( SQL Database)
Clinician records(Client/Server)
Patient records(Web)
SQL
.net
Web Services
37 Copyright © 2013 CA. All rights reserved.
Users and devices
Applications
The App: Integrate and republish the APIs via Layer 7
Side-effects( SQL Database)
Clinician records(Client/Server)
Patient records(Web)
SQL
.net
Web Services
Mobile Access Gateway
38 Copyright © 2013 CA. All rights reserved.
The Prescription app on Clinician’s device
Applications
Access Controls: Clinician using Prescription app
Side-effects( SQL Database)
Clinician records(Client/Server)
Patient records(Web)
SQL
.net
Web Services
Mobile Access Gateway
AuthMinder
OAuthtoken
OAuthtoken
1: Strong authentication
2: Token delivered
3: Token trusted by L7 Mobile Access GW
Private key securely stored on the mobile
39 Copyright © 2013 CA. All rights reserved.
Patients and their devices
Applications
Access Control: patient self-service, multi-channel
Side-effects( SQL Database)
Clinician records(Client/Server)
Patient records(Web)
SQL
.net
Web ServicesC
A
Sit
eM
inder
Patient self service web application
AuthMinder
OAuthtoken
1: Strong authentication
2: Token delivered
3: Web channel protectedby SiteMinder
OAuthtoken
40 Copyright © 2013 CA. All rights reserved.
CA-MDM
Clinicians and their devices
Applications
Clinicians and BYOD: device management and security
Side-effects( SQL Database)
Clinician records(Client/Server)
Patient records(Web)
SQL
.net
Web Services
CA-MDM• Enterprise App
Store• Device inventory• Configuration
policy
CA-MDMConfiguration policy to manage the device• Configuration / passcode• Required apps• Device encryption• Remote wipe• Jailbreak detection• Maintains / monitors
compliant state
41 Copyright © 2013 CA. All rights reserved.
Mobile Email Management
Two simple rules:
Clinician must not have email access from unmanaged devices
Patient data must never be transmitted in clear
Patient data; PII
42 Copyright © 2013 CA. All rights reserved.
Clinicians and their devices
Securing patient data over email
Exchange server
CA-MDM
DataMinder
CA-MEM
LDAP
1) Email is sent asking for an expert opinion from a clinical consultant (with a red tie!)
43 Copyright © 2013 CA. All rights reserved.
Clinicians and their devices
Securing patient data over email
Exchange server
CA-MDM
DataMinder
CA-MEM
LDAP
2) Exchange server checks with CA-MDM whether device sending the email is managed and in a compliant state
44 Copyright © 2013 CA. All rights reserved.
Clinicians and their devices
Securing patient data over email
Exchange server
CA-MDM
DataMinder
CA-MEM
LDAP
3) If the device is properly managed it is allowed to send email. Next the email content is scanned with DataMinder to see if it contains patient confidential data….
45 Copyright © 2013 CA. All rights reserved.
Clinicians and their devices
Securing patient data over email
Exchange server
CA-MDM
DataMinder
CA MEM
LDAP
4a) If the email does not contain any sensitive data it can be sent on its way….
46 Copyright © 2013 CA. All rights reserved.
Clinicians and their devices
Securing patient data over email
Exchange server
CA-MDM
DataMinder
CA-MEM
LDAP
4b) If it does contain patient data the email must be encrypted. The consultant’s public key is retrieved from an LDAP directory.
47 Copyright © 2013 CA. All rights reserved.
Clinicians and their devices
Securing patient data over email
Exchange server
CA-MDM
DataMinder
CA-MEM
LDAP
5) The email is encrypted and sent on to the consultant.
48 Copyright © 2013 CA. All rights reserved.
Securing patient data over email
CA-MEM
6) On their mobile device, consultant opens the email as usual. When they access the encrypted attachment they are asked to authenticate using the same process and credential they use for application access.
7) After successfully authenticating the email can be decrypted and the contents viewed.
49 Copyright © 2013 CA. All rights reserved.
And finally, when it’s all over…
50 Copyright © 2013 CA. All rights reserved.
Clinicians and BYOD: device management and security
Requirement CA-MDM solutionMaintain inventory of devices Manages device inventory and custody by
user
Prevent use of jailbroken / rooted devices Jailbreak detection and remediation policy
Mandate the use of strong authentication and Prescription apps
Enterprise App Store and policy-based app deployment
Monitor / maintain compliant configuration, for example:
Encryption: storage and backupsPasscode lock
Configuration Policies to control all aspects of device configuration and security
Incident response / cleanup Remote lock, selective wipe, and factory reset capabilities