Delivering a Secure BYOD Solution with XenMobile MDM and ... · ᵒXenMobile MDM integration with...
11
Delivering a Secure BYOD Solution with XenMobile MDM and Cisco ISE Bhumik Patel – Solutions Architect, Citrix Systems May 21 st 2013
Transcript of Delivering a Secure BYOD Solution with XenMobile MDM and ... · ᵒXenMobile MDM integration with...
Delivering a Secure BYOD
Solution with XenMobile MDM
and Cisco ISE
Bhumik Patel – Solutions Architect, Citrix Systems
May 21st 2013
App Management
Device Management
Data Management
Device Management
Data Management
Secure Mail
Productivity and Collaboration
Ap
p M
an
ag
em
ent
Business Apps
Complete Enterprise Mobility Management
Any app, any device, anywhere
Mobile Value-on-Investment
Mobile Device
Management
Sandboxed
Mail and Web
Mobile
App Security
Mobile
Data Control
Mobile
Network Control
SSO & Identity
Management
Desktop & App
Virtualization
Social & Web
Collaboration
Today: The Industry’s Most Comprehensive,
“Best of Suite” Mobile Portfolio
© 2013 Citrix | Confidential – Do Not Distribute MDM Edition
“My users are bringing in all types of devices…I need to set PIN codes, WiFi, etc..”
“Want to give device choice…but what do I do if devices are lost or stolen?”
“…need to manage personal and corporate devices alongside each other”
“…issuing shared tablets to shift workers in
hospital/retail stores/restaurants/dist
centers…”
Secure and manage my devices
1
© 2013 Citrix | Confidential – Do Not Distribute
Enterprise-grade MDM: • Manage & configure corporate and BYO
devices
• Detect jailbreak, blacklist/whitelist apps
• Full/selective device wipe
Easy to setup:
• Fully wizard-driven
Extensible:
• Enterprise integration (e.g.: LDAP and PKI)
• Integration with Network Policy Engines
MDM Edition
Secure and manage my devices
1
© 2013 Citrix | Confidential – Do Not Distribute
BYOD Smart Solution Built on Unified Access Foundation
Workspace Management
Secure Mobility
Policy Management
Core Infrastructure
Workspace Productivity Apps
Unified Access One Network, One Policy, One Management
BYOD Smart Solution
Cis
co V
alid
ate
d D
esi
gn S
cop
e
Other Smart Solutions (ex. VXI)
…
AnyConnect
ISE
Prime Mgmt
Firewall
Wireless Switching
MDM
Jabber Webex
© 2011 Cisco and/or its affiliates. All rights reserved. Cisco Public 7
Policy Profiling
VLAN 10 VLAN 20
Personal
Employee
Corporate
Wireless LAN Controller
Corporate Resources
Restricted Internet Only
USER LOCATION
TIME Access Method
DHCP
RADIUS SNMP
NETFLOW
Corporate Issued Device 1. User Authentication and Authorization 2. Profiling to identify device 3. Policy decision 4. Policy enforce to “VLAN 10” on same SSID 5. Full access granted 6. Full device visibility
PERSONAL Device 1. User Authentication and Authorization 2. Profiling to identify device 3. Policy decision 4. Policy enforce to “VLAN 10 or 20” on same SSID 5. Full or Restricted access granted 6. Full device visibility
HTTP
DNS DEVICE
Centralized Policy Engine
Unified Access Management
Single SSID
ISE
Policy
© 2013 Citrix | Confidential – Do Not Distribute
XenMobile MDM with Cisco ISE
Mgt Interface
ISE Mgr
Push AnyConnect Certificate
ISE checks device Registration with MDM
ISE
Device tries to access network
MDM returns registration
status
1
2
3
MDM returns device status
ISE checks device status
4
5
XenMobile MDM
© 2013 Citrix | Confidential – Do Not Distribute
NETWORK CONTROL (ISE)
FULL MOBILITY MANAGEMENT
(MDM) Enterprise Software
Distribution
Management
(Backup, Remote Wipe, etc.)
Classification/
Profiling
Secure Network Access
(Wireless, Wired, VPN)
Mobile + PC Policy Compliance Detection
(Jailbreak, Pin Lock, etc.)
Secure Data
Containers
User/IT Co-Managed Device Device and Network-Based IT Control
User Managed Device Network-Based IT Control
Cert +
Supplicant
Provisioning
Registration
Cert +
Supplicant
Provisioning
Registration
Inventory
Management Context-Aware
Access Control
(Role, Location, etc.)
Compliance Enforcement
Cisco ISE + XenMobile MDM = Mobility Control
© 2013 Citrix | Confidential – Do Not Distribute
Key Takeaways
• Leverage joint BYOD solutions from Cisco and Citrix to enable your enterprise mobility
needs.
• Solution Details
ᵒ XenMobile MDM integration with Cisco ISE is supported with Cisco ISE 1.2 and XenMobile MDM
7.1 versions.
ᵒ Next Cisco BYOD CVD will provide tested implementation details on the joint solution.
• More information
ᵒ SYN6309: Best Practices for deploying end-to-end enterprise mobility management
• Thursday @9:00 AM
Work better. Live better.
