who are sophos? - c-cure€¦ · sophos mobile control 19 a mobile device management solution that...
TRANSCRIPT
Securing Mobile DevicesAntony Gibson
Sophos Channel Manager C-Cure Mobile Security Event - 5th May 2011
Who are Sophos?
Simple + Secure
• World‟s third largest IT security vendor
• Malware, data protection and security
experts
• Over 25 years experience
• Trusted by over 100 million users
• Headquarters in Oxford and Boston
• 1500+ employees, over 600 people in
R&D
• Fastest growing of the three largest
endpoint security vendors
• Leaders in Gartner‟s Magic Quadrants
Comprehensive security & data protection
Endpoint Email Web
Encryption Mobile
Our „secret sauce‟ - a different approach
Integrated
data
control
endpoint
& gateway
Compliance
Mobile
Control
AV, HIPS,
Live
Protection
Web
Protection
PatchEncryption
Managed intelligence
Eliminate complexity
Comprehensive protection
Simply Secure
Business focused support
Securing mobile devices
7
P E B K A C
Problem Exists Between Keyboard and Chair
• Confined to office
• Controlled internet
• Enforced security
Increasing demand for mobility
8
11%
29%
Increase in supporting
Android for business use
Of companies surveyed
already supporting iOS
Forrester 2010
9
unaware that smartphones can transmit
confidential payment information such as credit
card details without the user being prompted89%
51%
Enabled but unaware
do not use keypad locks or passwords
65% worry more about security on their laptop or
desktop PC
10
P E B M A C
• Truly handheld computers
• Connectivity everywhere
• Apps for everything
Problem Exists Between Mobile and Cappuccino
11
The “personal” device
“If a smartphone lives up to what it should
be then it is something, as human beings,
we will have an emotional relationship with
because it's there all the time, it's our
window on the world, it's our mouthpiece,
it's everything we are and have. „My life is
in there‟ you hear people scream.”
Stephen Fry
What are the threats
• Data theft and loss
• Rogue apps (eg Droid Dream)
• Mobile provider patching
• Browser vulnerabilities
12
To enable and secure
13
Make life easier for IT
Secure lost or
stolen devicesAllow email access
Manage
applications
14
Allow email access
• Know who‟s connecting what
• Define that access
• Secure the device
15
Secure lost or
stolen devices
• Encryption and remote lock or wipe
• Geo location and anti theft
• Stop access to the device except for it‟s owner
16
Manage applications
• Know the apps being used
• Identify rogue applications
• Consider the “kill switch” approach
17
Make life easier for IT
• A user should be able to set themselves up
• Configuration changes should cause minimal disruption
• Ease of use cuts both ways
Mobile management approaches
18
May create support
challenges
Enables tight control
Sandboxes business
access
Sandbox area Lightweight agent
Manages the entire
device
Uses built-in capabilities
and apps
May cause difficulties in
segregating data
Sophos Mobile Control
19
A Mobile Device Management solution that provides:
• Configuration of the phone
• Addresses concerns regarding loss/theft
• Supports employees‟ personal devices
• DIY device management with a self service portal
• For Apple, Android and Windows Mobile
Allow email access
Give access to exchange email knowing that the device being used is
properly secured and visible in your console
• Access only given to managed devices
• Uses Microsoft ActiveSync Exchange proxy
• Email settings sent over the air to devices
Deal with lost or stolen
devices
If a mobile goes missing , or even if the SIM card is changed you can
be sure any company data is safe
• Force passcode or password for any managed device
• Remote lock and/or wipe
• Removes all mail and calendar items downloaded from Exchange (iOS
only)
22
Manage apps
If you want to make sure people are using a specific VPN client then
deploy it from the console with the correct settings
• Prohibit installation of apps (iOS only)
• Full device inventory: Model, OS, Network, Installed apps etc
• Set policies, deploy and remove apps
23
Make life easier for IT
If people want to use their own phone for work just point them to the
portal and they can do it themselves
• Users can register, lock and wipe devices from a self service portal
• Management client and policy deployment is over the air
• Admins can send text message alerts to device groups in a couple of
clicks
Key features
iPhone/iPad Android Win Mobile 6.x
Loss/Theft
ProtectionY Y Y
Remote
ConfigurationY (Y)* Y
Controlled E-Mail
AccessY Y Y
Self Service PortalY Y Y
Device Status
ReportingY Y Y
* Additional Android features will be added in later versions
25
How does it work?
26
Using the self-service
portal
Setting your
password policyViewing device information
Managing
applications
What‟s next
• Application virtualisation
• Remote control
• The mobile as productivity aid
27
Mobile Control roadmap
Staying ahead of the curve
For the latest on Sophos products and security trends follow our experts on Twitter
@achrispace@jameslyne
http://www.sophos.com/security/
Sophos AB
+ 46 858 400 [email protected]
http://nakedsecurity.sophos.com/
30
Questions