IBM MobileFirst Protect/Maas360...IBM MobileFirst Protect Content allows the administrator to add...
Transcript of IBM MobileFirst Protect/Maas360...IBM MobileFirst Protect Content allows the administrator to add...
© 2015 IBM Corporation
IBM Security
1 © 2015 IBM Corporation
IBM MobileFirst Protect/Maas360
© 2015 IBM Corporation
IBM Security
2 © 2015 IBM Corporation
© 2015 IBM Corporation
IBM Security
3 © 2015 IBM Corporation
© 2015 IBM Corporation
IBM Security
4 © 2015 IBM Corporation
© 2015 IBM Corporation
IBM Security
5
IBM MobileFirst Protect Devices
Mobile Device Management
• Manage smartphones, tablets & laptops featuring iOS,
Android, Windows Phone
• Gain complete visibility of devices, security & network
• Enforce compliance with real-time & automated actions
The core mobility device management features include device enrollment, configuration, security policy
management, and device actions, such as send message, locate, lock, and wipe. The advanced mobility device
management features include automated compliance rules, bring your own device (BYOD) privacy settings, and
mobility intelligence dashboards and reporting.
http://www.maas360.com/products/mobile-device-management/
Cloud On Premise Licensing
Metrics
✔ ✔ Managed Client Device
Authorized User
© 2015 IBM Corporation
IBM Security
6
IBM MobileFirst Protect for BlackBerry
BlackBerry Device Management
• Gain complete visibility of devices, security & network
• Perform help desk operations like Send Message, Reset
Passwords, Full device wipes
• Manage BlackBerry Policies
• Remove devices from the BES server
IBM MobileFirst Protect bietet Unterstützung für Blackberry für Blackberry Enterprise Server verbundene mobile
Geräten durch die Verwendung Blackberry-APIs. Zu den Features gehören Remote Actions, wie eine Nachricht
senden, Reset Passcode, zuweisen und löschen der Blackberry Enterprise Server-Richtlinie, als auch detaillierte
Berichte über die Geräteattribute. Installation von MobileFirst Protect Extender ist erforderlich. Verfügbar für Geräte,
die über den Blackberry Enterprise Server 5.0 gezeigt oder verwaltet werden.
Cloud On Premise Licensing
Metrik
✔ ✔ Managed Client Device
Authorized User
http://www.maas360.com/products/mobile-device-management/blackberry/
© 2015 IBM Corporation
IBM Security
7
IBM MobileFirst Protect Applications
IBM MobileFirst Protect Applications provides the ability to add applications and distribute them to supported
devices managed by MobileFirst Protect Devices. This includes the MobileFirst Protect App Catalog, an on-device
application for users to view, install, and receive device notifications when apps have available updates.
http://www.maas360.com/products/mobile-application-management/
Mobile Application Management
• Deploy custom enterprise app catalogs
• Blacklist, whitelist & require apps
• Administer app volume purchase programs
Prerequisite Products • IBM MobileFirst Protect Devices
Cloud On Premise Licensing
Metrics
✔ ✔ Managed Client Device
Authorized User
© 2015 IBM Corporation
IBM Security
8
IBM MobileFirst Protect Expenses
IBM MobileFirst Protect Expenses allows the administrator to create data usage policies and assign them to
supported devices that are managed by MobileFirst Protect Devices, and assign these policies at a device, group,
or global level, and configure alert thresholds and messaging for both in network and roaming data usage.
Prerequisite Products • IBM MobileFirst Protect Devices
http://www.maas360.com/products/mobile-expense-management/
Mobile Expense Management
• Monitor mobile data usage with real-time alerts
• Set policies to restrict or limit data & voice roaming
• Review integrated reporting and analytics
Cloud On Premise Licensing
Metrics
✔ ✔ Managed Client Device
Authorized User
© 2015 IBM Corporation
IBM Security
9
IBM MobileFirst Protect Secure Mail
IBM MobileFirst Protect Secure Mail provides a separate and secure office productivity application for users to
access and manage email, calendar, and contacts. It is able to control emails and attachments to prevent data
leakage by restricting the ability to forward or move content to other applications, to enforce authentication, restrict
cut, copy, and paste, and lock down email attachments for view only.
http://www.maas360.com/products/secure-mail/
Secure Mail
• Contain email text & attachments to prevent data leakage
• Enforce authentication, copy/paste & forwarding restrictions
• FIPS 140-2 compliant, AES-256 bit encryption for data at
rest
Cloud On Premise Licensing
Metrics
✔ ✔ Managed Client Device
Authorized User
© 2015 IBM Corporation
IBM Security
10
IBM MobileFirst Protect Secure Browser
IBM MobileFirst Protect Browser is a full-featured web browser that enables secure access to corporate intranet
sites and enforces compliance of content policies by defining website filtering and security policies to ensure that
users only access approved web content that is based on a number of content categories, such as social
networking, explicit, or malware sites. It includes the ability to disable native and third-party web browsers either
through application policy or blacklisting when combined with MobileFirst Protect Devices. It allows whitelist
exceptions to websites, restrict cookies; copy, paste, and print features; and enables Kiosk mode.
http://www.maas360.com/products/secure-browser/
Secure Browser
• Enable secure access to intranet sites & web apps w/o VPN
• Define URL filters based on categories & whitelisted sites
• Restrict cookies, downloads, copy/paste & print features
Cloud On Premise Licensing
Metrics
✔ ✔ Managed Client Device
Authorized User
© 2015 IBM Corporation
IBM Security
11
IBM MobileFirst Protect Application Security
Cloud On Premise Licensing
Metrics
✔ ✔ Managed Client Device
Authorized User
IBM MobileFirst Protect Application Security provides additional data protection for enterprise applications that use
MobileFirst Protect WorkPlace SDK during development or the MobileFirst Protect application wrapping capability.
MobileFirst Protect Application Security integrates the app with the IBM MobileFirst Protect Secure Productivity Suite.
This enables single sign-on, intranet access through MobileFirst Protect Mobile Enterprise Gateway, and enforcement of
data security settings.
http://www.maas360.com/products/application-security/
Application Security
• Contain enterprise apps with a simple app wrapper or SDK
• Enforce authentication & copy/paste restrictions
• Prevent access from compromised devices
Prerequisite Products • For remote wipe, single sign on, in-app VPN: requires either:
- IBM MobileFirst Protect Devices
- IBM MobileFirst Protect Management Suite
© 2015 IBM Corporation
IBM Security
12
IBM MobileFirst Protect Content
Cloud On Premise Licensing
Metrics
✔ ✔ Managed Client Device
Authorized User
IBM MobileFirst Protect Content allows the administrator to add and distribute documents to supported devices. It
includes MobileFirst Protect Doc Catalog, an on-device, password-protected container that provides a secure and simple
way for users to access, view, and share documents. It includes seamless access to distributed content and repositories
such as Microsoft SharePoint, Box, and Google Drive. Access to private Microsoft SharePoint and Microsoft Windows
File Shares are available with the MobileFirst Protect Enterprise Gateway. Documents managed through MobileFirst
Protect can be version controlled, audited, and secured through data loss prevention (DLP) policy options, such as
require authentication, restrict copy-paste functionality, and block from being opened or shared in other applications.
http://www.maas360.com/products/document-management/
Mobile Content Management
• Contain documents & files to prevent data leakage
• Enforce authentication, copy/paste & view-only restrictions
• Access IBM MobileFirst Protect distributed content &
repositories such as SharePoint, Box & Google Drive
© 2015 IBM Corporation
IBM Security
13
IBM MobileFirst Protect Document Editor
Cloud On Premise Licensing
Metrics
✔ ✔ Managed Client Device
Authorized User
MobileFirst Protect Document Editor provides users with the ability to create, edit, search, and save content securely, all
in an encrypted container on iOS and Android devices.
Prerequisite Products • IBM MobileFirst Protect Content
Secure Document Editor
• Create, edit and save content securely, all in an encrypted
container on iOS and Android devices
• Collaborate on Word, Excel, PowerPoint and text files
• Change fonts and insert images, tables, links and more
• Perform searches within documents
http://www.maas360.com/products/document-management/
© 2015 IBM Corporation
IBM Security
14
IBM MobileFirst Protect Document Sync
Cloud On Premise Licensing
Metrics
✔ ✔ Managed Client Device
Authorized User
Prerequisite Products • IBM MobileFirst Protect Content
Secure Document Sync
• Seamlessly sync user content across managed devices
• Applies policies to content such as restricting copy/paste and
blocking opening or sharing in unmanaged apps
• Store content securely in both the cloud and on devices
http://www.maas360.com/products/document-management/
MobileFirst Protect Document Sync provides users with the ability to easily and securely synchronize user content across
managed mobile devices. Administrators can ensure that policies, such as restricting cut, copy, and paste, and blocking
content from being opened or shared in other apps or the policies are defined and are in place for user content across
devices. Content is stored securely, both in the cloud and on the device, and accessed only through the MobileFirst Protect
Document Catalog
© 2015 IBM Corporation
IBM Security
15
IBM MobileFirst Protect Content Service
Cloud On Premise Licensing
Metrics
✔ Managed Client Device
Authorized User
Prerequisite Products • One of the following :
- IBM MobileFirst Protect Applications
- IBM MobileFirst Protect Content
Cloud Content Service
• Host and distribute corporate documents and apps with a globally
optimized distribution network
• Reduce network load and increase download performance for
users
• Achieve maximum scalability
IBM MobileFirst Protect Content Service provides users with the ability to upload and store application packages and
documents to MobileFirst Protect's cloud storage system.
Corequisite Products IBM MobileFirst Protect Content Service Storage
IBM MobileFirst Protect Content Service Bandwidth
Note: Clients must purchase a quantity of each of the above products
in addition to the Content Service product.
© 2015 IBM Corporation
IBM Security
16
IBM MobileFirst Protect Content Service Storage
Cloud On Premise Licensing
Metrics
✔ Gigabyte
Prerequisite Products • One of the following :
- IBM MobileFirst Protect Content
- IBM MobileFirst Protect Management Suite
- IBM MobileFirst Protect Productivity Suite
- IBM MobileFirst Protect Content Suite
Cloud Content Service Storage
• Licensed in increments of 1 GB
• Total storage is shared across all content, including: Enterprise
Apps, Documents & Windows Applications
• Cloud Storage is capped at clients entitlements; no overage
MobileFirst Protect Content Service Storage provides users the ability to purchase a total amount of data storage available
for use with the MobileFirst Protect Content Service.
© 2015 IBM Corporation
IBM Security
17
IBM MobileFirst Protect Content Service Bandwidth
Cloud On Premise Licensing
Metrics
✔ Gigabyte
Prerequisite Products • One of the following :
- IBM MobileFirst Protect Content
- IBM MobileFirst Protect Management Suite
- IBM MobileFirst Protect Productivity Suite
- IBM MobileFirst Protect Content Suite
Cloud Content Service Bandwidth
• Licensed in increments of 1 GB
• Total bandwidth is shared across all devices
• Clients should purchase the total amount of bandwidth required for
regular document and app distribution
• Overage rates apply for bandwidth used over entitlement.
MobileFirst Protect Content Service Bandwidth provides users the ability to purchase the total amount of bandwidth available
for use with the MobileFirst Protect Content Service.
© 2015 IBM Corporation
IBM Security
18
Seamless Enterprise Integration
© 2015 IBM Corporation
IBM Security
19
IBM MobileFirst Protect Gateway for Browser
Cloud On Premise Licensing
Metrics
✔ ✔ Managed Client Device
Authorized User
Prerequisite Products • One of the following :
- IBM MobileFirst Protect Secure Browser
- IBM MobileFirst Protect Productivity Suite
MobileFirst Protect Gateway for Browser allows supported devices to access approved internal websites without requiring a
full-device level, virtual private networks (VPN) connection.
http://www.maas360.com/products/mobile-enterprise-gateway/
Mobile Enterprise Gateway for Browser
• Enable IBM MobileFirst Protect Secure Browser to access
enterprise intranet sites, web apps & network resources
• Access seamlessly & securely without needing a VPN
session on mobile device
© 2015 IBM Corporation
IBM Security
20
IBM MobileFirst Protect Gateway for Apps
Cloud On Premise Licensing
Metrics
✔ ✔ Managed Client Device
Authorized User
Prerequisite Products • One of the following :
- IBM MobileFirst Protect Secure Application Security
- IBM MobileFirst Protect Productivity Suite
MobileFirst Protect Gateway for Apps provides users, outside the enterprise network, secure, seamless access to internal
application resources without requiring a full-device, VPN connection.
http://www.maas360.com/products/mobile-enterprise-gateway/
Mobile Enterprise Gateway for Apps
• Add in app VPN to IBM MobileFirst Protect Application Security
to integrate behind-the-firewall data in private apps
• Incorporate enterprise data without a device VPN session
© 2015 IBM Corporation
IBM Security
21
IBM MobileFirst Protect Gateway for Documents
Cloud On Premise Licensing
Metrics
✔ ✔ Managed Client Device
Authorized User
Prerequisite Products • One of the following :
- IBM MobileFirst Protect Content
- IBM MobileFirst Protect Content Suite
MobileFirst Protect Gateway for Documents provides users, outside the enterprise network, secure, seamless access to
internal Microsoft SharePoint sites, Microsoft Windows File Shares, and other file stores without requiring a full-device, VPN
connection
http://www.maas360.com/products/mobile-enterprise-gateway/
Mobile Enterprise Gateway for Docs
• Enhance MaaS360 Mobile Content Management with secure
access to internal files, e.g. SharePoint & Windows File Share
• Retrieve enterprise documents without a device VPN session
© 2015 IBM Corporation
IBM Security
22
IBM MobileFirst Protect Threat Management
Cloud On Premise Licensing
Metrics
✔ SaaS offering will
work with On Prem
Managed Client Device
Authorized User
Prerequisite Products • One of the following :
- IBM MobileFirst Protect Devices
- IBM MobileFirst Protect Management Suite
IBM MobileFirst Protect Threat Management provides the ability to detect, alert, and remediate enterprise malware on iOS
and Android devices. Additionally, it provides advanced jailbreak, root and hider detection with over the air updates for
security definitions. Administrators can configure compliancy policy on these advanced threats and immediately remediate
the vulnerability, improving the security of BYOD and corporate owned devices.
Threat Management
• Proactively manage mobile threats in real time
• Reduce risk of sensitive data leakage of corporate and personal
information
• Take automated actions to reduce and mitigate risk
• Support both BYOD and Corporate Owned devices
http://www.maas360.com/products/mobile-threat-management/
© 2015 IBM Corporation
IBM Security
23
IBM MobileFirst Protect Laptop
Cloud On Premise Licensing
Metrics
✔ Client Device
IBM MobileFirst Protect Laptop provides you with the ability to enroll, configure, manage, secure, and report on Mac OS X
and Microsoft Windows PC based devices alongside smartphones and tablets. Organizations can maintain consistent
security policies and profiles across both corporate and employee-owned devices within the same MobileFirst Protect
management console.
Laptop Management
• Gain visibility into Hardware, Software, OS and Patch Inventory
• Provide OS and Windows Application Update patch compliance
• Take control of devices over the air: lock, shut down, restart,
distribute software
• Provide real-time security alerts and reports
• Support both BYOD and Corporate Owned devices
http://www.maas360.com/products/laptop-management/
© 2015 IBM Corporation
IBM Security
24
IBM MobileFirst Protect Laptop Lifecycle
Cloud On Premise Licensing
Metrics
✔ Client Device
IBM MobileFirst Protect Laptop Lifecycle Management provides the capabilities of MobileFirst Protect Laptop and adds the
following capabilities: Software Distribution
Laptop Lifecycle Management
• Gain visibility into Hardware, Software, OS and Patch Inventory
• Take control of devices over the air: lock, shut down, restart,
distribute software
• Provide real-time security alerts and reports
• Support both BYOD and Corporate Owned devices
• Adds Software Distribution
http://www.maas360.com/products/laptop-management/
Corequisite Products IBM MobileFirst Protect Content Service Storage
IBM MobileFirst Protect Content Service Bandwidth
Note: Clients must purchase a quantity of each of the above products in addition to the this product. Software
distribution requires storage and bandwidth to function.
© 2015 IBM Corporation
IBM Security
25
IBM MobileFirst Protect Laptop Location
Cloud On Premise Licensing
Metrics
✔ Client Device
IBM MobileFirst Protect Laptop Location provides the ability to locate, and retrieve historical locations of laptops.
Laptop Location
• Locate devices in real-time
• View location history
http://www.maas360.com/products/laptop-management/
Prerequisite Products One of the following:
- IBM MobileFirst Protect Laptop
- IBM MobileFirst Protect Laptop Lifecycle
© 2015 IBM Corporation
IBM Security
26
IBM MobileFirst Protect Laptop Security
Cloud On Premise Licensing
Metrics
✔ Client Device
IBM MobileFirst Protect Laptop Security provides the ability to update 3rd party anti-virus software definitions. Clients are
required to license the 3rd party software.
Laptop Security
• Update AntiVirus Definitions
• Ensure the latest Antivirus protection
• Reduce risk and data loss
http://www.maas360.com/products/laptop-management/
Prerequisite Products One of the following:
- IBM MobileFirst Protect Laptop
- IBM MobileFirst Protect Laptop Lifecycle
© 2015 IBM Corporation
IBM Security
27
Product Suites
© 2015 IBM Corporation
IBM Security
28
IBM MobileFirst Protect Management Suite
Includes:
• IBM MobileFirst Protect Devices
• IBM MobileFirst Protect Applications
• IBM MobileFirst Protect Expenses
• IBM MobileFirst Protect Content (SaaS Only)
Purchased Separately: If customers plan on using cloud storage for enterprise apps, they must also
purchase the following:
• IBM MobileFirst Protect Content Storage
• IBM MobileFirst Protect Content Bandwidth
Cloud On Premise Licensing
Metrics
✔ ✔ Managed Client Device
Authorized User
© 2015 IBM Corporation
IBM Security
29
IBM MobileFirst Protect Productivity Suite
Includes:
• IBM MobileFirst Protect Secure Mail
• IBM MobileFirst Protect Secure Browser
• IBM MobileFirst Protect Applications
• IBM MobileFirst Protect Application Security
• IBM MobileFirst Protect Content (SaaS Only)
Purchased Separately: If customers plan on using cloud storage for enterprise apps, they must also
purchase the following:
• IBM MobileFirst Protect Content Storage
• IBM MobileFirst Protect Content Bandwidth
Cloud On Premise Licensing
Metrics
✔ ✔ Managed Client Device
Authorized User
© 2015 IBM Corporation
IBM Security
30
IBM MobileFirst Protect Content Suite
Includes:
• IBM MobileFirst Protect Content
• IBM MobileFirst Protect Document Editor
• IBM MobileFirst Protect Document Sync
• IBM MobileFirst Protect Content (SaaS Only)
Purchased Separately: If customers plan on using cloud storage for documents, they must also
purchase the following:
• IBM MobileFirst Protect Content Storage
• IBM MobileFirst Protect Content Bandwidth
Cloud On Premise Licensing
Metrics
✔ ✔ Managed Client Device
Authorized User
© 2015 IBM Corporation
IBM Security
31
IBM MobileFirst Protect Gateway Suite
Includes:
• IBM MobileFirst Protect Gateway for Browser
• IBM MobileFirst Protect Gateway for Documents
• IBM MobileFirst Protect Gateway for Applications
Cloud On Premise Licensing
Metrics
✔ ✔ Managed Client Device
Authorized User
© 2015 IBM Corporation
IBM Security
32
IBM MobileFirst Protect Professional
Includes:
• IBM MobileFirst Protect Management Suite
• IBM MobileFirst Protect Productivity Suite
Purchased Separately: If customers plan on using cloud storage for enterprise apps or documents,
they must also purchase the following:
• IBM MobileFirst Protect Content Storage
• IBM MobileFirst Protect Content Bandwidth
Cloud On Premise Licensing
Metrics
✔ ✔ Managed Client Device
Authorized User