mobile containers made simple with sophos mobile · mobile containers made simple with sophos...

Smartphones and tablets have become a business staple. Whether a

mobile device is personally owned as in a Bring Your Own Device (BYOD)

scenario or company provisioned as part of a Choose Your Own Device

(CYOD) program, people want to use their mobile devices to make work

easier. That means putting both corporate and personal data on whatever

device they happen to have. IT’s best option is to find a pragmatic

approach to securing corporate data while protecting users’ privacy.

Mobile Containers Made Simple with Sophos Mobile

A Sophos Solution Brief March 2017 2


The benefits of mobile containersMobile containers are a simple approach to securing corporate data on mobile devices regardless of who owns it. A mobile container creates a separate, secure area on a smartphone or tablet in which users can access corporate data. The container is authenticated and encrypted to protect and isolate data from unauthorized access, malware, other applications and system resources. Moreover, containers give users the freedom to work on the device of their choosing while giving IT control over what’s rightfully theirs.

In addition to providing secure access to corporate data, mobile containers simplify mobile security and device management. IT has full control over the container with the ability to wipe corporate data, and set policies such as when and where users can access corporate resources. The container can also standardize the variances between device platforms to address the management overhead created by platform fragmentation, especially with the differences across Android device manufacturers.

Factors to consider when selecting a mobile container solutionEmployees use smartphones and tablets to improve their productivity. A mobile security solution shouldn’t get in the way. When selecting a mobile container solution, choose one that is designed to be easy to use and easy to manage.

To start, determine how many OS platforms you currently support and consider:

Ì Is it difficult to know what OS version a device is running?

Ì Do you have carriers that don’t support the latest security features on the latest version of the OS?

If your answer is yes to either of these questions, then you should look for a mobile container solution that supports all the platforms and OS versions that you run. While there are significant functional, management and security differences between the three major platforms – iOS, Windows and Android – fragmentation within the Android market can be a significant pain point for IT organizations. Variances across the OS require configuring them one by one. The container solution you choose should standardize data access controls such as email to eliminate the need to touch individual devices or become an Android expert.

In addition to email containers, content containers can enhance collaboration across your organization. Most organizations want to provide secure access to email, calendar and contacts, which can be delivered via a personal information management (PIM) container.

AS A FIRST STEP, DETERMINE HOW MANY OS PLATFORMS YOU CURRENTLY SUPPORT

CONSIDER THE TYPE OF DATA, FILES AND DOCUMENTS YOU WANT TO MAKE AVAILABLE TO USERS



You can also provide a secure workspace in which users can access, collaborate on and share documents. If employees need access to certain business applications or repositories of information on corporate websites.

Sophos Mobile: Simple Containers, Strong SecuritySophos Mobile is an Enterprise Mobility Management (EMM) solution that is ideal for a range of deployment scenarios, including BYOD and CYOD. It delivers simple yet secure mobile containers to protect corporate data without slowing down users or IT.

Email container

Sophos Secure Email helps IT easily provision secure corporate email. It provides a secure containerized solution for email, calendar and contacts, separating them from other email applications on the device. Mails, contacts and events are synchronized via the Microsoft Exchange ActiveSync protocol, and all the data in the container is encrypted for security.

The container allows IT to provision a standard email experience across multiple versions of iOS, Android and Windows Mobile, creating an easily managed environment for corporate email. Features and settings vary slightly between the OS to adapt to their differing capabilities.

Sophos Secure Email user interface



Content container

Sophos Secure Workspace enables employees to share and collaborate on documents both internally and externally. It lets people work securely on mobile devices, without slowing them down. IT can control how users alter, share and distribute documents, as well has how and which cloud storage application they can use.

Integration with Sophos SafeGuard file encryption enables encrypted files to be sent to the content container and opened only if the device is in a secure state and the user can validate his/her identity with a password. Encryption can also be monitored and controlled so that only encrypted files are allowed to be stored in cloud collaboration and storage sites such as Box, Google Drive or corporate WebDAV sites.

Sophos Secure Workspace user interface and administrator interface

Corporate browser

Sophos Corporate Browser helps IT provide secure browsing access to frequently-used business-related and internal corporate websites. The browser simplifies single sign-on for corporate intranet sites. Treated as part of the container, the browser can be configured to allow or disable ‘save password’ to reduce the risk for important corporate sites. It can also prevent the migration of data from an internal location to an external app by, for example, preventing copy and paste.

Simplicity of use

Sophos Mobile is designed to be simple and easy for both IT and employees to use.

For employees:

Ì Employees can quickly download the email and content containers from the app store for their device.

Ì A single container login gives users access to the data and corporate resources in the containers.

A CORPORATE BROWSER WITHIN A CONTENT CONTAINER PROVIDES SECURE BROWSING ACCESS WITHOUT ADDITIONAL PASSWORDS



For IT:

Ì The simple, intuitive dashboard makes it easy for IT to deploy and manage the mobile containers on a daily basis.

Ì A self-service portal can be provisioned for users to take care of basic help desk tasks such as enrolling and decommissioning devices, and resetting passcodes, reducing IT overhead.

Overarching security controls

The Sophos container policies give the administrator control over how, when and even where a container may be accessed. Start-up checks ensure the container is not on a compromised device and is within a certain geographical area, Wi-Fi range or even time of day. This ensures that only a properly authenticated user operating within acceptable boundaries can access sensitive corporate data.

Administrator interface for general security settings in Sophos Mobile

Example user interface when Sophos

Mobile security requirements are not

met



Containers are just part of the mobile security storyMobile containers are just the start of a holistic mobile security strategy. While the container secures corporate data on the device, another set of controls is necessary to protect the integrity of the device itself. Sophos Mobile is a complete security solution, combining powerful EMM capabilities with proven protection technology.

Compliance

Sophos Mobile enforces IT’s compliance policies to ensure that the device meets minimum security standards before granting access to the container. Integrated network control constantly monitors device health and detects jailbreaks, blacklisted applications and insecure device settings.

If a security breach is detected, Sophos Mobile can be configured to automatically, notify the admin staff, reconfigure the device, deny access to or even wipe the containers to ensure that corporate data is not compromised due to lack of compliance.

Compliance settings in Sophos Mobile

Mobile Containers Made Simple with Sophos Mobile Control

United Kingdom and Worldwide Sales

Tel: +44 (0)8447 671131

Email: [email protected]

North American Sales

Toll Free: 1-866-866-2802


Australia and New Zealand Sales

Tel: +61 2 9409 9100


Asia Sales

Tel: +65 62244168


Oxford, UK © Copyright 2017. Sophos Ltd. All rights reserved.Registered in England and Wales No. 2096520, The Pentagon, Abingdon Science Park, Abingdon, OX14 3YP, UK Sophos is the registered trademark of Sophos Ltd. All other product and company names mentioned are trademarks or registered trademarks of their respective owners.

2017-03-17 WP-NA (MP)

Anti-malware protection

The market dominance of Android devices and the inherent openness of Android have led to the proliferation of malware and Potentially Unwanted Applications (PUA). SophosLabs detected over 1.7 million new pieces of mobile malware in 2015 alone, and the growth rate is accelerating as hackers increasingly focus on this ‘soft target’.

Sophos Mobile includes award-winning antivirus protection for Android devices using up-to-the-minute intelligence from SophosLabs and the Sophos core antivirus engine. It automatically scans all newly installed applications on Android devices and quarantines infected devices.

Integration with additional security solutions

By enabling your security to work as a system you can both elevate your protection while enhancing productivity. Sophos Mobile integrates with both Sophos UTM, enabling admins to block Wi-Fi and VPN access for non-compliant devices, and with Sophos SafeGuard, enabling users to access encrypted data on their phones and tablets.

ConclusionSecure mobile containers give IT organizations the control they need to protect corporate data on smartphones and tablets. Sophos Mobile is a powerful yet easy-to-use solution that provides secure containers for corporate email, calendars and contacts, while also enabling secure collaboration on mobile devices. Together with unrivalled threat protection capabilities and security controls, it gives organizations complete mobile security they can actually deploy and use.

Try it now for free Try the online demo or download a free 30-day trial at sophos.com/mobile.

http://www.sophos.com/mobile

http://www.sophos.com/mobile

mobile containers made simple with sophos mobile · mobile containers made simple with sophos...

Documents