Android Fragmentation: Solving the Enterprise Mobility Dilemma

© 2011 Fiberlink CommunicationsMORE Webinar Series© 2011 Fiberlink Communications

Android Fragmentation: Solving the Enterprise

Mobility Dilemma Joseph Pappano

© 2011 Fiberlink CommunicationsMORE Webinar Series

Is Android fragmented? The Hope.

2


Is Android fragmented? The Hype.

3


Is Android fragmented? The Data.

> Devices and manufacturers 125+ devices 30+ manufacturers

4




> Android OS versions In 2010, devices were shipped running 5 separate

versions of Android

5





versions of Android

> Carriers 15+ carriers

6





versions of Android

> Carriers 15+ carriers

> Software Carrier-specific filtering in Android Market Carrier-specific pre-installed software

7


Who is this an issue for?

> Users Possibly

8



> Users Possibly

> Android developers Probably

9



> Users Possibly


> Corporations Maybe

10



> Users Possibly


> Corporations Maybe

> IT departments Definitely

11


What are some of the challenges for IT?

> Help desk and end-user support processes Built around standardization strategy

12




> Reporting Device properties are not reported consistently

13





> Security Many core security features are missing ActiveSync security features implemented

inconsistently Applications may open new vulnerabilities

14





> Security Many core security features are missing ActiveSync security features implemented

inconsistently Applications may open new vulnerabilities

> No ability to upgrade platform across the ecosystem Google cannot do this for Android Apple can do this for iOS

15


How do you get a handle on this?

> Start with an Enterprise Mobility Management Strategy

16


Users

Approaching Enterprise Mobility Management

17

Applications

Data

Networks

Devices


Users


18

Applications

Data

Networks

Define policies

Devices


Users


19

Applications

Data

Networks

Define policies

Deploy and restrict

applications

Devices


Users


20

Applications

Data

Networks

Define policies

Deploy and restrict

applications

Protect data

Devices


Users


21

Applications

Data

Networks

Define policies

Deploy and restrict

applications

Protect data

Access networks

Devices


Users


22

Applications

Data

Networks

Define policies

Deploy and restrict

applications

Protect data

Access networks

Devices

Manage devices


Users

> Define Terms of Use and Acceptable Use policies Have employees agree to them

23


Users


> Determine which employees or roles require a corporate device

24


Users



> Publish an approved or recommended list of devices And carriers

25


Users



> Publish an approved or recommended list of devices And carriers

> Define end-user support policies Base support offered on device characteristics

• Corporate owned - CORPORATE• Employee owned and corporate approved - TRUSTED• Employee owned and not corporate approved -

UNTRUSTED

26


Applications

> Mobilize applications appropriately Use a framework to segment - Corporate, Trusted,

Untrusted

27


Applications

> Mobilize applications appropriately Use a framework to segment - Corporate, Trusted,

Untrusted

> Application Types Email/Contacts/Calendar

• Enable EAS or OWA in Exchange• Watch out for attachments

Enterprise Applications • ERP, CRM, LOB, . . .

Custom Applications• Enterprise App Store

Commercial Applications• Downloaded from Android Market

28


Data

> Email Attachments

29


Data

> Email Attachments

> Enterprise Applications Data storage, sync and encryption

30


Data

> Email Attachments


> Commercial data storage and sync applications You may need to blacklist these

31


Data

> Email Attachments



> Removable storage Phones look like any other USB storage device when

tethered Password protect device and encrypt data

32


Data

> Email Attachments



> Removable storage Phones look like any other USB storage device when

tethered Password protect device and encrypt data

> Remote Wipe To remove data from a lost device or when an

employee exits

33


Networks

> Corporate WLAN MDM solution needed to manage

34


Networks


> Corporate VPN MDM solution needed to manage

35


Networks


> Corporate VPN MDM solution needed to manage

> Public networks Expense management

36


Devices

> Segment based on Android version 2.2 is the earliest version that can be considered for

TRUSTED use in the enterprise 2.3 just released, 2.4 on the way

• Not much for IT in these releases

37


Devices




> Segment based on manufacturer Variations in EAS support can be significant

38


Devices




> Segment based on manufacturer Variations in EAS support can be significant

> Determine your MDM architecture Exchange ActiveSync (EAS) 3rd Party MDM Solution Hybrid (EAS & MDM)

39


Advantages of an Agent-based MDM Solution

> Provide additional security features Selective Wipe, Encryption

40




> Insures a consistent set of security policies exist Addresses implementation inconsistencies in Android

variants

41





variants

> Provide richer device data Network and location information Addresses data inconsistencies in Android variants

42





variants

> Provide richer device data Network and location information Addresses data inconsistencies in Android variants

> Addresses gaps in EAS policy management model EAS policy is associated with a mailbox not a device Cant support different policies for multiple devices

accessing the same mailbox

43


Recent Developments

> Google announces Android 3.0 Tablet only Full device encryption

44


Recent Developments


> Device manufacturers are filling the gaps Mobile World Congress Announcements

• Samsung announces enterprise security enhancements• Motorola announces acquisition of 3LM

45


Recent Developments


> Device manufacturers are filling the gaps Mobile World Congress Announcements

• Samsung announces enterprise security enhancements• Motorola announces acquisition of 3LM

> Enterprise-class security and management is coming

46


Key Takeaways

> You can’t avoid Android or legislate it away Corporate purchasing is no longer the dominant form

of device adoption Mobile device usage is no longer a privilege but a right

47


Key Takeaways



> There are practices and tools available today Enterprise Mobility Management EAS and 3rd-party MDM solutions

48


Key Takeaways



> There are practices and tools available today Enterprise Mobility Management EAS and 3rd-party MDM solutions

> Help is on the way Watch what Google, Motorola-3LM, and Samsung are

doing

49


Wrap-up

> Up-coming Webinars (http://links.maas360.com/webinars/)

March 3: Provisioning and Mobile Device Management for iPhones, iPads, and Androids

> Past Webinars (http://links.maas360.com/webinars/)

Managing Personal Mobile Devices In Your Business Financial Services: Benchmarking your Smartphone IT Operations Enabling iPhones and iPads in the Enterprise

> Plus lots of How-To content at the MaaSters Center Mobile Device Management Best Practices

• http://links.maas360.com/mdm/ Mobile Device Management Strategy Series from Lopez Research

• http://links.maas360.com/mdm/ Mobile Device Management Glossary

• http://links.maas360.com/mdm/ Over 300 articles and posts including training videos and free tools

• http://maasters.maas360.com/

50

Questions or follow-up?Joseph [email protected]

Android Fragmentation: Solving the Enterprise Mobility Dilemma

Technology

Transcript of Android Fragmentation: Solving the Enterprise Mobility Dilemma