Post on 18-Jan-2015
description
© 2011 Fiberlink CommunicationsMORE Webinar Series© 2011 Fiberlink Communications
Android Fragmentation: Solving the Enterprise
Mobility Dilemma Joseph Pappano
© 2011 Fiberlink CommunicationsMORE Webinar Series
Is Android fragmented? The Hope.
2
© 2011 Fiberlink CommunicationsMORE Webinar Series
Is Android fragmented? The Hype.
3
© 2011 Fiberlink CommunicationsMORE Webinar Series
Is Android fragmented? The Data.
> Devices and manufacturers 125+ devices 30+ manufacturers
4
© 2011 Fiberlink CommunicationsMORE Webinar Series
Is Android fragmented? The Data.
> Devices and manufacturers 125+ devices 30+ manufacturers
> Android OS versions In 2010, devices were shipped running 5 separate
versions of Android
5
© 2011 Fiberlink CommunicationsMORE Webinar Series
Is Android fragmented? The Data.
> Devices and manufacturers 125+ devices 30+ manufacturers
> Android OS versions In 2010, devices were shipped running 5 separate
versions of Android
> Carriers 15+ carriers
6
© 2011 Fiberlink CommunicationsMORE Webinar Series
Is Android fragmented? The Data.
> Devices and manufacturers 125+ devices 30+ manufacturers
> Android OS versions In 2010, devices were shipped running 5 separate
versions of Android
> Carriers 15+ carriers
> Software Carrier-specific filtering in Android Market Carrier-specific pre-installed software
7
© 2011 Fiberlink CommunicationsMORE Webinar Series
Who is this an issue for?
> Users Possibly
8
© 2011 Fiberlink CommunicationsMORE Webinar Series
Who is this an issue for?
> Users Possibly
> Android developers Probably
9
© 2011 Fiberlink CommunicationsMORE Webinar Series
Who is this an issue for?
> Users Possibly
> Android developers Probably
> Corporations Maybe
10
© 2011 Fiberlink CommunicationsMORE Webinar Series
Who is this an issue for?
> Users Possibly
> Android developers Probably
> Corporations Maybe
> IT departments Definitely
11
© 2011 Fiberlink CommunicationsMORE Webinar Series
What are some of the challenges for IT?
> Help desk and end-user support processes Built around standardization strategy
12
© 2011 Fiberlink CommunicationsMORE Webinar Series
What are some of the challenges for IT?
> Help desk and end-user support processes Built around standardization strategy
> Reporting Device properties are not reported consistently
13
© 2011 Fiberlink CommunicationsMORE Webinar Series
What are some of the challenges for IT?
> Help desk and end-user support processes Built around standardization strategy
> Reporting Device properties are not reported consistently
> Security Many core security features are missing ActiveSync security features implemented
inconsistently Applications may open new vulnerabilities
14
© 2011 Fiberlink CommunicationsMORE Webinar Series
What are some of the challenges for IT?
> Help desk and end-user support processes Built around standardization strategy
> Reporting Device properties are not reported consistently
> Security Many core security features are missing ActiveSync security features implemented
inconsistently Applications may open new vulnerabilities
> No ability to upgrade platform across the ecosystem Google cannot do this for Android Apple can do this for iOS
15
© 2011 Fiberlink CommunicationsMORE Webinar Series
How do you get a handle on this?
> Start with an Enterprise Mobility Management Strategy
16
© 2011 Fiberlink CommunicationsMORE Webinar Series
Users
Approaching Enterprise Mobility Management
17
Applications
Data
Networks
Devices
© 2011 Fiberlink CommunicationsMORE Webinar Series
Users
Approaching Enterprise Mobility Management
18
Applications
Data
Networks
Define policies
Devices
© 2011 Fiberlink CommunicationsMORE Webinar Series
Users
Approaching Enterprise Mobility Management
19
Applications
Data
Networks
Define policies
Deploy and restrict
applications
Devices
© 2011 Fiberlink CommunicationsMORE Webinar Series
Users
Approaching Enterprise Mobility Management
20
Applications
Data
Networks
Define policies
Deploy and restrict
applications
Protect data
Devices
© 2011 Fiberlink CommunicationsMORE Webinar Series
Users
Approaching Enterprise Mobility Management
21
Applications
Data
Networks
Define policies
Deploy and restrict
applications
Protect data
Access networks
Devices
© 2011 Fiberlink CommunicationsMORE Webinar Series
Users
Approaching Enterprise Mobility Management
22
Applications
Data
Networks
Define policies
Deploy and restrict
applications
Protect data
Access networks
Devices
Manage devices
© 2011 Fiberlink CommunicationsMORE Webinar Series
Users
> Define Terms of Use and Acceptable Use policies Have employees agree to them
23
© 2011 Fiberlink CommunicationsMORE Webinar Series
Users
> Define Terms of Use and Acceptable Use policies Have employees agree to them
> Determine which employees or roles require a corporate device
24
© 2011 Fiberlink CommunicationsMORE Webinar Series
Users
> Define Terms of Use and Acceptable Use policies Have employees agree to them
> Determine which employees or roles require a corporate device
> Publish an approved or recommended list of devices And carriers
25
© 2011 Fiberlink CommunicationsMORE Webinar Series
Users
> Define Terms of Use and Acceptable Use policies Have employees agree to them
> Determine which employees or roles require a corporate device
> Publish an approved or recommended list of devices And carriers
> Define end-user support policies Base support offered on device characteristics
• Corporate owned - CORPORATE• Employee owned and corporate approved - TRUSTED• Employee owned and not corporate approved -
UNTRUSTED
26
© 2011 Fiberlink CommunicationsMORE Webinar Series
Applications
> Mobilize applications appropriately Use a framework to segment - Corporate, Trusted,
Untrusted
27
© 2011 Fiberlink CommunicationsMORE Webinar Series
Applications
> Mobilize applications appropriately Use a framework to segment - Corporate, Trusted,
Untrusted
> Application Types Email/Contacts/Calendar
• Enable EAS or OWA in Exchange• Watch out for attachments
Enterprise Applications • ERP, CRM, LOB, . . .
Custom Applications• Enterprise App Store
Commercial Applications• Downloaded from Android Market
28
© 2011 Fiberlink CommunicationsMORE Webinar Series
Data
> Email Attachments
29
© 2011 Fiberlink CommunicationsMORE Webinar Series
Data
> Email Attachments
> Enterprise Applications Data storage, sync and encryption
30
© 2011 Fiberlink CommunicationsMORE Webinar Series
Data
> Email Attachments
> Enterprise Applications Data storage, sync and encryption
> Commercial data storage and sync applications You may need to blacklist these
31
© 2011 Fiberlink CommunicationsMORE Webinar Series
Data
> Email Attachments
> Enterprise Applications Data storage, sync and encryption
> Commercial data storage and sync applications You may need to blacklist these
> Removable storage Phones look like any other USB storage device when
tethered Password protect device and encrypt data
32
© 2011 Fiberlink CommunicationsMORE Webinar Series
Data
> Email Attachments
> Enterprise Applications Data storage, sync and encryption
> Commercial data storage and sync applications You may need to blacklist these
> Removable storage Phones look like any other USB storage device when
tethered Password protect device and encrypt data
> Remote Wipe To remove data from a lost device or when an
employee exits
33
© 2011 Fiberlink CommunicationsMORE Webinar Series
Networks
> Corporate WLAN MDM solution needed to manage
34
© 2011 Fiberlink CommunicationsMORE Webinar Series
Networks
> Corporate WLAN MDM solution needed to manage
> Corporate VPN MDM solution needed to manage
35
© 2011 Fiberlink CommunicationsMORE Webinar Series
Networks
> Corporate WLAN MDM solution needed to manage
> Corporate VPN MDM solution needed to manage
> Public networks Expense management
36
© 2011 Fiberlink CommunicationsMORE Webinar Series
Devices
> Segment based on Android version 2.2 is the earliest version that can be considered for
TRUSTED use in the enterprise 2.3 just released, 2.4 on the way
• Not much for IT in these releases
37
© 2011 Fiberlink CommunicationsMORE Webinar Series
Devices
> Segment based on Android version 2.2 is the earliest version that can be considered for
TRUSTED use in the enterprise 2.3 just released, 2.4 on the way
• Not much for IT in these releases
> Segment based on manufacturer Variations in EAS support can be significant
38
© 2011 Fiberlink CommunicationsMORE Webinar Series
Devices
> Segment based on Android version 2.2 is the earliest version that can be considered for
TRUSTED use in the enterprise 2.3 just released, 2.4 on the way
• Not much for IT in these releases
> Segment based on manufacturer Variations in EAS support can be significant
> Determine your MDM architecture Exchange ActiveSync (EAS) 3rd Party MDM Solution Hybrid (EAS & MDM)
39
© 2011 Fiberlink CommunicationsMORE Webinar Series
Advantages of an Agent-based MDM Solution
> Provide additional security features Selective Wipe, Encryption
40
© 2011 Fiberlink CommunicationsMORE Webinar Series
Advantages of an Agent-based MDM Solution
> Provide additional security features Selective Wipe, Encryption
> Insures a consistent set of security policies exist Addresses implementation inconsistencies in Android
variants
41
© 2011 Fiberlink CommunicationsMORE Webinar Series
Advantages of an Agent-based MDM Solution
> Provide additional security features Selective Wipe, Encryption
> Insures a consistent set of security policies exist Addresses implementation inconsistencies in Android
variants
> Provide richer device data Network and location information Addresses data inconsistencies in Android variants
42
© 2011 Fiberlink CommunicationsMORE Webinar Series
Advantages of an Agent-based MDM Solution
> Provide additional security features Selective Wipe, Encryption
> Insures a consistent set of security policies exist Addresses implementation inconsistencies in Android
variants
> Provide richer device data Network and location information Addresses data inconsistencies in Android variants
> Addresses gaps in EAS policy management model EAS policy is associated with a mailbox not a device Cant support different policies for multiple devices
accessing the same mailbox
43
© 2011 Fiberlink CommunicationsMORE Webinar Series
Recent Developments
> Google announces Android 3.0 Tablet only Full device encryption
44
© 2011 Fiberlink CommunicationsMORE Webinar Series
Recent Developments
> Google announces Android 3.0 Tablet only Full device encryption
> Device manufacturers are filling the gaps Mobile World Congress Announcements
• Samsung announces enterprise security enhancements• Motorola announces acquisition of 3LM
45
© 2011 Fiberlink CommunicationsMORE Webinar Series
Recent Developments
> Google announces Android 3.0 Tablet only Full device encryption
> Device manufacturers are filling the gaps Mobile World Congress Announcements
• Samsung announces enterprise security enhancements• Motorola announces acquisition of 3LM
> Enterprise-class security and management is coming
46
© 2011 Fiberlink CommunicationsMORE Webinar Series
Key Takeaways
> You can’t avoid Android or legislate it away Corporate purchasing is no longer the dominant form
of device adoption Mobile device usage is no longer a privilege but a right
47
© 2011 Fiberlink CommunicationsMORE Webinar Series
Key Takeaways
> You can’t avoid Android or legislate it away Corporate purchasing is no longer the dominant form
of device adoption Mobile device usage is no longer a privilege but a right
> There are practices and tools available today Enterprise Mobility Management EAS and 3rd-party MDM solutions
48
© 2011 Fiberlink CommunicationsMORE Webinar Series
Key Takeaways
> You can’t avoid Android or legislate it away Corporate purchasing is no longer the dominant form
of device adoption Mobile device usage is no longer a privilege but a right
> There are practices and tools available today Enterprise Mobility Management EAS and 3rd-party MDM solutions
> Help is on the way Watch what Google, Motorola-3LM, and Samsung are
doing
49
© 2011 Fiberlink CommunicationsMORE Webinar Series
Wrap-up
> Up-coming Webinars (http://links.maas360.com/webinars/)
March 3: Provisioning and Mobile Device Management for iPhones, iPads, and Androids
> Past Webinars (http://links.maas360.com/webinars/)
Managing Personal Mobile Devices In Your Business Financial Services: Benchmarking your Smartphone IT Operations Enabling iPhones and iPads in the Enterprise
> Plus lots of How-To content at the MaaSters Center Mobile Device Management Best Practices
• http://links.maas360.com/mdm/ Mobile Device Management Strategy Series from Lopez Research
• http://links.maas360.com/mdm/ Mobile Device Management Glossary
• http://links.maas360.com/mdm/ Over 300 articles and posts including training videos and free tools
• http://maasters.maas360.com/
50
Questions or follow-up?Joseph Pappanojpappano@fiberlink.com