safely enabling mobile devices with globalprotect

8/10/2019 Safely Enabling Mobile Devices With GlobalProtect

1/12

Safely Enabling Mobile Devices


2/12

Unlocking The Potential of Mobile Depends On Security

Intranet

Running our

!usiness on

Mobile Devices

BenefitstoB

usiness

Mobile Maturity

E"ail

#ccessing

!usiness #pps

$ % &$'()* Palo #lto +et,orks- .onfidential and Proprietary-


3/12

E/isting #pproaches for Mobile Security Don0t 1ork

Approach Exposure to Risk

Block mobiledevices

People will still use mobile devices,except without your control

Hope existingsecurity

protects mobiledevices

Dont know if existing measures will beeective for mobile devices

Use basic

mobile securitylike ActiveSync

Doesnt address mobile threats andwont secure apps and data

2 % &$'()* Palo #lto +et,orks- .onfidential and Proprietary-


4/12

+e, approach to safely enabling "obile devices

Protect the Device Control the DataManage the Device

Ensure devices are safely

enabled ,hile si"plifying

deploy"ent 3 setup4 Ensure proper settings

in place* such as

strong passcodes and

encryption4 Si"plify provisioning of

co""on configurationlike e"ail and

certificates

Protect the "obile device

fro" e/ploits and

"al,are4 Protecting the device

fro" infection also

protects confidential

data and unauthori5ed

net,ork access

.ontrol access to data

and "ove"ent of

bet,een applications4 .ontrol access by app*

user* and device state4 E/tend data "ove"ent

controls to the device

to ensure data stays

,ithin 6business apps7

) % &$'()* Palo #lto +et,orks- .onfidential and Proprietary-


5/12

8lobalProtect Mobile Security Solution

GlobalProtect App

GlobalProtect Gateway

Delivers "obile threat

prevention and policy

enforce"ent based on apps*

users* content and device

state

Enables device "anage"ent*

provides device state infor"ation*

and establishes secure

connectivity

GlobalProtect MobileSecurity Manager

Provides device

"anage"ent* "al,are

detection* and device state

9 % &$'()* Palo #lto +et,orks- .onfidential and Proprietary-


6/12

Manage The Device

Manage device settings

4 Enforce security settings such as passcode4 Restricts device functions such as ca"era

4 .onfigure accounts such as e"ail* :P+*

1i;


7/12

Protect The Device

Consistent security everywhere

4 IPsec>SSA :P+ connection to a purposebuilt ne/t generation security platfor" for

policy enforce"ent regardless of the

device location

Mobile threat prevention

4 :ulnerability BIPSC and "al,are B#:C

protection for "obile threats4 URA filtering for protection against

"alicious ,ebsites

4 1ild


8/12

.ontrol The Data

Control access to applications and

data

4 8ranular policy deter"ines ,hichusers and devices can access

sensitive applications and data

4 Policy criteria based on application*

user* content* device* and device state

for control and visibility

4 Identify device types such as

iOS* #ndroid* 1indo,s* Macdevices

4 Identify device o,nership such

as personal B!ODC or corporate

issued

4 Identify device states such as

rooted>?ailbroken

4


9/12

Fo, the integrated solution ,orks


10/12

1hy Palo #lto +et,orks for Mobile Security

Integrates the necessary technologies P!,policy, threat prevention, management

"ni#uely capable of protecting the device byleveraging $ild%ire, IP&, and app policy

'ich security platform that can protect alltra(c, devices, applications and data in thenetwork

(( % &$'()* Palo #lto +et,orks- .onfident ial and Proprietary-


11/12

8lobalProtect Mobile Security Manager Ordering* Aicensing and #vailability

Mobile Security Manager runs on the ne, 8P;('' appliance

8P;('' co"es ,ith support for up to 9'' "obile devices #dditional capacity licenses BperpetualC to support additional devices

(G* $G* 9G* ('G* $9G* 9'G* and (''k

1ild


12/12

safely enabling mobile devices with globalprotect

Documents