don’t settle - mdm & enterprise mobile solutionst_settle... · limitations of the intune...

1

Don’t Settle for IntuneChoose the Leader in Complete Enterprise Mobile Security

MKT EN V1.5

415 East Middlefield Road

Mountain View, CA 94043

Tel: +1.877.819.3451

Fax :+1.650.919.8006

[email protected]

www.mobileiron.com

mailto:[email protected]

http://www.mobileiron.com

Disclaimer: This information is being provided to you in connection with your possible business transaction with MobileIron. Any information concerning products and services other than MobileIron’s comes from public and other third party sources, and we have not independently verified this information. Although we believe it to be accurate, we cannot guarantee the accuracy of it.

2

Table of Contents

Executive Summary

Think Beyond Office 365

Secure the Modern, Multi-OS Enterprise with MobileIron

Drive Productivity with Secure Access to Office 365

Protect Apps and Data with Defense-grade Security

Standardize on a Truly Unified and Scalable Platform

Fully Integrate Windows 10 Desktop and Mobile Management

Support Future Requirements with Innovative EMM

Customers Deserve Better than Basic MDM

3

4

7

8

9

12

12

13

14

3


Executive SummaryOffice 365 is Microsoft’s next-generation, cloud-based productivity suite. It includes online versions of Microsoft’s most popular solutions, like Exchange and SharePoint, storage through OneDrive, and several mobile apps, including Word, Excel, PowerPoint, OneNote, Outlook, Publisher, Skype for Business, and Yammer. As organizations increasingly use Office 365 and other cloud services on mobile devices, they need a secure mobile and cloud architecture to protect all of these apps and data on the device and in transit. It requires a comprehensive, unified approach to enterprise mobility management (EMM) that includes defense-grade security, massive scalability, a broad ecosystem of technology partners, enhanced Office 365 security, and integrated Windows 10 desktop and mobile management. And it has to provide all of this without locking customers into a proprietary technology stack.

Microsoft’s Intune MDM offering is not designed to meet these requirements. It offers customers basic MDM capabilities that primarily manage Office 365. It’s intended for customers who are dependent on Microsoft solutions and who have minimal management and security requirements on iOS and Android devices. Plus, it further locks customers into the Microsoft stack. As a result, modern mobile enterprises with multi-OS environments and complex mobile and cloud security requirements will need to look beyond Intune to support their mobile business processes.

Today’s mobile enterprise requires an

EMM provider that can:

• Offer a comprehensive, multi-OS security platform that can manage any mobile app or cloud service on any device.

• Support a broad ecosystem of leading apps and technology partners.

• Provide the scalability to support unlimited business growth and innovation to harness future mobile opportunities.

• Be a trusted advisor who can help plan, design, and deploy a comprehensive strategy with experienced customer support services.

MobileIron is a proven leader in EMM innovation and mobile security for the modern enterprise. In addition to being the enterprise choice for secure mobility, we rank in the top five for all categories of the Gartner Critical Capabilities for High-Security Mobility Management. We have also been positioned as a Leader in the Gartner Magic Quadrant for Enterprise Mobility Management Suites for six consecutive years. Our platform is fully mature and built from the ground up to address evolving mobility and cloud requirements. Plus, MobileIron integrates with leading technology providers, so customers aren’t tied to proprietary technologies that don’t meet their needs. Our goal is to ensure organizations can choose the best technologies that fit their environment.

This paper highlights the key advantages of MobileIron over Intune. It’s designed to help customers better understand how MobileIron can address some of the limitations of the Intune offering so they can make the best choice to meet mobile requirements today and down the road.


4

Think Beyond Office 365Securing Office 365 on mobile devices is essential to the success of any mobile enterprise strategy, but there’s more to it than that. Organizations have to think beyond Office 365 and ensure their security model can seamlessly extend to other enterprise apps and cloud services such as Salesforce, Google Drive, Box and more.

MobileIron is uniquely capable of delivering the security infrastructure every business needs. Our platform is ideal for customers who need a stable, secure, and highly scalable solution that supports a broad ecosystem of apps and cloud services. Just as important, MobileIron integrates with a variety of enterprise IT systems and applications via standards-based — not proprietary — mechanisms, so we can easily adapt to meet enterprise needs today and in the future.

Only a comprehensive mobile and cloud security platform like MobileIron can deliver on key modern enterprise security requirements such as:

1. Comprehensive Office 365 Security. Office 365 is one of the most broadly used enterprise productivity suites today. To protect all these apps and data on any device, IT must be able to:

• Distribute apps securely. Secure app configuration and distribution through an enterprise app store is the first step to securing Office 365 data on mobile devices. It allows IT to distribute apps to specific users and groups and ensure devices are in compliance before they are allowed to download apps. IT admins can also configure native email and PIM apps on mobile devices so they can securely connect to Office 365.

• Protect app data at rest on the device. App containerization allows IT to separate personal and enterprise data on the device, which can help prevent untrusted apps from accessing enterprise data. IT can also enforce mobile security controls such as “Open In” restrictions, secondary encryption for app data stored on the device, and selective wipe in case a user’s device is ever lost or stolen.

• Protect app data in motion to backend services. Office 365 data resides in the secure Microsoft Cloud, but the path from device to cloud is often over untrusted networks such as in a hotel or airport. Protecting data in motion to the enterprise backend or cloud services therefore requires full visibility and control over all devices that connect to ActiveSync for email access. IT also needs to prevent man-in-the-middle attacks on the connection between mobile devices and backend services. This requires the ability to define conditional access policies, which can also help block untrusted mobile devices and apps from corporate access.

This framework also applies to the security of other business apps and cloud services on mobile devices.

5


2. Defense-grade Security. In recent years, malware has increasingly targeted mobile operating systems with the intent of rooting or jailbreaking the device to make it vulnerable to further exploits such as spyware and communication interception. However, despite the rise in high-profile mobile malware attacks, anti-malware adoption continues to remain flat with a global adoption rate of less than 5%. With more sensitive business data residing on more mobile devices than ever before, defense-grade security measures are needed to keep sensitive data from falling into the wrong hands. That’s why organizations need a mobile and cloud security platform that provides strong encryption and allows admins to selectively wipe devices, disable shadow IT, and prevent data exfiltration to cloud services — while still enabling a highly productive mobile user experience.

3. Scalable, Integrated Platform. The consumerization of IT means that most enterprise users now have multiple devices — including smartphones, tablets, laptops, smart watches and more — to access data from a vast and growing ecosystem of mobile apps and cloud services. The rapidly expanding Internet of Things (IoT) is pushing the market for devices even further. That’s why a scalable and fully integrated platform that’s built from the ground up to support mobile and cloud security requirements is more important than ever. It needs to do more than just scale to the number of devices in the enterprise. It needs the flexibility to support multiple device types, form factors, and operating systems, as well as protect app and cloud access on all devices.

4. Broad Ecosystem of Technology Partners. Building a secure mobile infrastructure requires a platform that can easily integrate with other market-leading technologies. Relying on a vendor’s proprietary stack doesn’t provide enough flexibility to ensure enterprises can adapt to mobile technology and security challenges down the road.

5. Integrated Windows 10 Desktop and Mobile Management. Windows 10 converges traditional Windows operating systems and provides a unified set of MDM APIs through a single EMM platform like MobileIron. With this convergence, IT can manage any Windows 10 device, including mobile and desktop devices, by accessing these MDM protocols. Windows 10 also modernizes app deployment, because now Win32 applications can be deployed through EMM along with modern apps. As result, admins can accelerate device setup and configuration, simplify app administration, and ensure seamless security across all Windows 10 devices managed with EMM. Gartner Research estimates that by 2018, 40 percent of organizations will be using EMM tools to manage at least a portion of their Windows PCs — a dramatic jump from less than five percent

Gartner Research estimates that by 2018, 40 percent of organizations will use EMM tools to manage at least a portion of their Windows PCs — a dramatic jump from less than five percent today.

2 http://www.computerweekly.com/feature/What-will-office-desktop-computing-look-like-in-2020


6

today.2

6. Mobile Innovation. The adoption of mobile and cloud technologies is driving massive changes in organizations around the world. Flexible and agile organizations that can quickly adopt modern enterprise technologies will be the ones to drive greater innovation and accelerate productivity. The choice of EMM platform is absolutely essential to this kind of business transformation. Organizations need a proven leader in mobile innovation who can fully support modern mobile device management, cloud security, and multi-OS desktop management. It also requires a global customer services network with the focus and expertise to solve the real-world mobile security challenges customers face across every industry, in any region of the world.

“Our people need access to data and other corporate resources on mobile devices, but we are mindful of the need to protect our systems, especially regulated data. We evaluated some of the leading EMM and MTD vendors and selected MobileIron for its native email support, ease of management, and better user experience.”

- Steven Johnson, Head of Data Protection & Cybersecurity Services Enterprise Technology Group New York Life


7

Secure The Modern, Multi-OS Enterprise with MobileIronMobileIron is a unified mobile and cloud security platform for enabling business transformation. MobileIron enables choice by securing any mobile device, app, and cloud service — including Office 365 — without requiring proprietary API integrations that lock customers into vendor technology stacks. In short, organizations that want a feature-rich, scalable, and stable EMM platform that integrates with a diverse ecosystem should consider MobileIron.

Customers should note that Microsoft Intune is not an EMM platform. It’s a basic MDM offering primarily designed to manage Office 365 apps. Although Intune provides basic support for native OS security capabilities, it is not platform-agnostic and lacks robust mobile security capabilities. In addition, while MobileIron provides both cloud and on-premises deployment options, Intune offers only cloud-based or hybrid deployment options, which are not viable for organizations that require an onsite EMM solution.



8

Drive Productivity with Secure Access to Office 365MobileIron helps IT securely distribute Office 365 through the MobileIron Apps@Work enterprise app store or configure the native email and PIM apps on mobile devices so they can connect to Office 365. This allows users to access business information in the most secure manner possible while preserving the native user experience.

In addition, MobileIron’s standards-based app security framework allows IT to:

• Protect Office 365 data on the device by enforcing OS containerization controls such as data separation, “Open In” restrictions, and selective wipe.

• Protect Office 365 data in motion to Microsoft Cloud through Tunnel, MobileIron’s secure per-app VPN.

• Ensure that only trusted apps and devices can access Office 365 data by using MobileIron Access to enforce conditional access.

• Block traffic to specific destinations, such as a personal OneDrive or Dropbox, using MobileIron Sentry for advanced traffic control.

• Set supplemental Office 365 configurations through the Azure Portal.

• Configure Office-specific data transfer controls such as “Save As” and “Copy/Paste.”

Intune’s app management capabilities are limited because it does not integrate with the Apple App Store or Google Play Store. To upload and publish apps, customers have to follow a complicated, manual, multi-step workflow that must be repeated for each app.

9


Protect Apps and Data with Defense-grade SecurityMobileIron ensures that only authorized users on authorized devices can access Office 365 apps and data. Our industry-certified platform and defense-grade security capabilities also protect critical enterprise information on the device and whenever it’s in motion to backend and cloud resources.

Industry Certifications. MobileIron maintains and continually updates a long list of industry certifications. (Intune does not have any federal certifications.)

8

FIPS 140-2

FIPS 140-2 is a National Institute of Standards and Technology (NIST) standard for cryptography and its utilization. This standard is recognized by many governments and public sector organizations including the U.S. government.

FedRAMP

FedRAMP is a mandatory U.S. government program that provides a standardized approach to security assessment, authorization and continuous monitoring for cloud services.

SOC2

Service Organization Controls (SOC) are a series of accounting standards that measure the control of financial information for a service organization. They are covered under the SSAE 16 and ISAE 3402 professional standards.

DISA Approved STIG

The Security Technical Implementation Guide (STIG) is approved by the Defense Information Systems Agency (DISA) for deployment on Department of Defense (DoD) networks.

CJIS

Criminal Justice Information Services (CJIS) is designed to secure fingerprint records, background check information, and other criminal justice information that is stored with or shared between local, state, and federal law enforcement agencies.

Derived Credentials & CAC/PIV

A Derived PIV Credential, which is issued by a federal department or agency to be used with mobile devices where the use of a physical card is impractical. The Derived PIV Credential is designed to serve as a federal government-wide standard for a secure identity credential interoperable across agencies.

NIAP MDM PP V2

A National Information Assurance Program (NIAP) approved Protection Profile, which includes requirements to ensure particular functionality is present, addresses DOD-specific needs for mobile device management servers.

NSA Approved (CSFC)

MobileIron has been approved as a validated Commercial Solution for Classified (CSFC) by the National Security Agency (NSA).


10

Mobile App-to-Cloud Security. Reduce the threat of data loss with unique access control capabilities to solve mobile app-to-cloud security challenges. MobileIron Access is a cloud security solution that allows IT admins to define granular cloud access control policies based on device posture, application authorization, and user identity. MobileIron continually checks device posture to ensure that devices accessing company apps and data are fully compliant with corporate security and compliance policies.

Secure Email. Don’t compromise between email security and employee productivity. MobileIron supports certificate-based authentication to simplify and secure user access to corporate email, including Microsoft Exchange, Office 365, and IBM Notes. It also provides conditional access based on the device’s security posture and allows IT to wipe all email data if the device is ever lost or stolen.

Secure Mobile Apps. Protect enterprise app data on any device or network. MobileIron offers critical app security capabilities such as cross-platform, government-grade encryption of app data at rest and in motion. It also supports the AppConfig community’s standards-based tools and best practices that enable a more consistent, open, and simple way to configure and secure enterprise mobile apps.

IT can also take advantage of the enhanced security capabilities of Samsung KNOX as well as the MobileIron AppConnect framework. AppConnect offers an extensive ecosystem with more than 150 third-party and in-house apps, so this solution is ideal for organizations that need to deploy wrapped apps with support for single sign-on (SSO), app-level access control, and app-specific configurations. It also enables secure access through DLP enforcement for corporate intranet and file-sharing without requiring a VPN.

Intune’s ecosystem currently integrates with only a few non-Microsoft apps and has limited compatibility with third-party mobile application development tools. It’s also important to note that because Microsoft is not part of the AppConfig community, Intune does not offer a scalable, standards-based app security framework.

Secure Per-app VPN Connectivity. IT can empower users to securely connect to authorized cloud services and access internal web apps and intranet sites without having to manage VPN connectivity. Our appliance-based architecture allows IT to have one gateway for all devices, which is ideal for a long-term mobility solution. MobileIron Sentry provides real-time compliance checks and inline control to ensure only trusted users, devices, and apps can access sensitive corporate data. Intune currently lacks an on-premises gateway required to provide secure per-app VPN connectivity to on-premises servers, databases (for in-house apps), intranet, and content repositories.

Secure and Seamless User Authentication. Protect against modern threats by going beyond basic SSO. MobileIron is the first EMM provider to launch secure SSO, which is a context-sensitive, certificate-based, identity provider-neutral approach to cloud authentication. We simplify user authentication with digital certificates, Kerberos, secure SSO, and robust support for public key infrastructure (PKI). Digital certificates provide strong authentication without the need for passwords so employees can instantly access their devices, apps, and data without having to remember and type in cumbersome passwords.

11


Visual Privacy Policy. MobileIron supports visual privacy to allow employees to see exactly which types of data are visible to IT and which actions the company can take on personal or company-owned devices. This helps narrow the trust gap between employees and their companies, which can accelerate the adoption of new mobile enterprise services and BYOD programs. MobileIron has led the industry in adopting visual privacy and announced our policy a full six months before other vendors. Intune does not provide any additional capabilities such as Visual Privacy Policy or secure SSO to protect enterprise data and private information on mobile devices.

MobileIron: A Recognized Global Leader in Mobile and Cloud Security As more companies shift from a desktop-centric work style toward modern mobile devices and operating systems, they are looking to our flexible, scalable, and innovative mobile and cloud security platform to secure all their apps and data. In addition to being the enterprise choice for secure mobility, we have been positioned as a Leader in the Gartner Magic Quadrant for Enterprise Mobility Management Suites for six consecutive years. MobileIron also ranks in the top five for all categories of the Gartner Critical Capabilities for High-Security Mobility Management.

3 https://www.gartner.com/doc/3424517/critical-capabilities-highsecurity-mobility-management

In addition to being the enterprise choice for secure mobility, we have been positioned as a Leader in the Gartner Magic Quadrant for Enterprise Mobility Management Suites for six consecutive years. MobileIron also ranks in the top five for all categories of the Gartner Critical Capabilities for High-Security Mobility Management.

Why MobileIron?

• Secure Office 365 and other cloud services across mobile and desktop using defense-grade security.

• Meet compliance and information security requirements for highly regulated industries such as financial services, government, healthcare, and more.

• Expand mobile and cloud business operations with a unified and scalable platform.

• Move beyond basic MDM and proprietary lock-ins with an innovative, modern EMM platform.

• Quickly achieve mobile implementation goals with highly experienced professional services and customer support teams.


11

12


Standardize on a Truly Unified and Scalable PlatformMobileIron was built from the ground up to provide a scalable, secure, and unified security backbone for the modern enterprise. We have always been 100% focused on mobility and continue to support the unique requirements of enterprises that are moving their business apps and data to the cloud today. Unlike some proprietary MDM offerings like Intune, MobileIron integrates with a variety of IT systems such as SIEM, NAC, app reputation services, and more. In addition, our OS-agnostic platform can be deployed on-premises or as a cloud-based solution to help customers fully support app, device, and cloud security while delivering a seamless and productive user experience.

Fully Integrate Windows 10 Desktop and Mobile ManagementThe release of Windows 10 no longer requires admins to use a variety of desktop management tools, such as Microsoft System Center Configuration Manager (SCCM), to manage legacy Windows PC clients. Instead, admins can use a single EMM platform like MobileIron to manage any Windows 10 device, including PCs and employee-owned mobile devices. Windows 10 makes this possible by allowing admins to access a unified set of MDM APIs through EMM. This allows admins to accelerate device setup and configuration, simplify app administration, and ensure seamless security across all enterprise devices managed with EMM.

MobileIron is one of the first vendors to combine modern MDM protocols with traditional management capabilities of Windows to provide a comprehensive Windows 10 management solution that can reduce desktop TCO by up to 80%. Our solution, MobileIron Bridge, enables organizations to:

• Unify traditional Windows using a consistent framework for securing Windows 10.

• Extend the power of EMM to the desktop by allowing granular GPO commands to be executed using the same EMM protocols.

• Access unified MDM APIs to manage any Windows 10 device and deliver a consistent, secure user experience regardless of form factor.

• Administer both Win32 and modern mobile apps through a secure enterprise app store.

• Secure access to enterprise resources such as Office 365 by synchronizing device posture with Azure Active Directory access control.

13



Support Future Requirements with Innovative EMMTo meet future requirements on mobile, enterprise customers need a partner who is already thinking of the future, and whose platform is built to handle rapid growth and changing technology requirements. With 45 modern mobile security patents and counting, MobileIron has a proven track record of innovation and scalability. Our professional services and customer support teams contribute directly to the bottom line by maximizing the value of every EMM investment. Customers can quickly access technology and implementation support to successfully progress through every step of the mobile journey.

Our professional services experts help customers define their mobile strategy as well as plan solution deployment, enrollment design, and training for IT admins and end users. Once customers are up and running, our global customer support team helps quickly solve problems and identify issues before they impact end users. We support each customer’s continued growth as business needs and security requirements evolve in the months and years ahead.

13

14


Customers Deserve Better than Basic MDM MobileIron is 100% focused on solving customer challenges, which is why we offer a security framework that provides comprehensive protection for Office 365 apps in addition to other enterprise apps and services. We also provide easy access to support experts at every stage of the implementation, from initial rollout to ongoing management. It’s why more than 13,000 companies have become successful by relying on MobileIron’s industry-leading platform and experienced, global services network.

With MobileIron, organizations don’t have to be locked into a proprietary MDM solution that doesn’t meet evolving multi-OS mobile and cloud security requirements. Learn how MobileIron can help deliver a highly productive user experience using world-class innovation, scalability, and experienced technology leadership. We’ve been a modern mobility leader ever since the beginning, and now our customers gain the benefit of our in-depth experience across every industry, in every corner of the globe, solving real-world problems every day.

12

For More InformationFor more information about MobileIron, please visit us at

https://info.mobileiron.com/dontsettle-IN.html

For questions regarding why Mobileiron , please contact [email protected]

https://info.mobileiron.com/dontsettle-IN.html

15


COPYRIGHT © 2016 MOBILEIRON. ALL RIGHTS RESERVED.

MobileIron is a registered trademark of MobileIron, Inc. in the United States and/or other countries. All other trademarks, trade names, or logos are the property of their respective owners and do not signify any endorsement or sponsorship by such owners.

Securing the Modern Enterprise Around the World

don’t settle - mdm & enterprise mobile solutionst_settle... · limitations of the intune...

Documents