ibm mobilefirst protect/maas360...ibm mobilefirst protect content allows the administrator to add...

© 2015 IBM Corporation

IBM Security

1 © 2015 IBM Corporation

IBM MobileFirst Protect/Maas360


IBM Security



IBM Security

5

IBM MobileFirst Protect Devices

Mobile Device Management

• Manage smartphones, tablets & laptops featuring iOS,

Android, Windows Phone

• Gain complete visibility of devices, security & network

• Enforce compliance with real-time & automated actions

The core mobility device management features include device enrollment, configuration, security policy

management, and device actions, such as send message, locate, lock, and wipe. The advanced mobility device

management features include automated compliance rules, bring your own device (BYOD) privacy settings, and

mobility intelligence dashboards and reporting.

http://www.maas360.com/products/mobile-device-management/

Cloud On Premise Licensing

Metrics

✔ ✔ Managed Client Device

Authorized User







IBM Security

6

IBM MobileFirst Protect for BlackBerry

BlackBerry Device Management

• Gain complete visibility of devices, security & network

• Perform help desk operations like Send Message, Reset

Passwords, Full device wipes

• Manage BlackBerry Policies

• Remove devices from the BES server

IBM MobileFirst Protect bietet Unterstützung für Blackberry für Blackberry Enterprise Server verbundene mobile

Geräten durch die Verwendung Blackberry-APIs. Zu den Features gehören Remote Actions, wie eine Nachricht

senden, Reset Passcode, zuweisen und löschen der Blackberry Enterprise Server-Richtlinie, als auch detaillierte

Berichte über die Geräteattribute. Installation von MobileFirst Protect Extender ist erforderlich. Verfügbar für Geräte,

die über den Blackberry Enterprise Server 5.0 gezeigt oder verwaltet werden.


Metrik


Authorized User

http://www.maas360.com/products/mobile-device-management/blackberry/







IBM Security

7

IBM MobileFirst Protect Applications

IBM MobileFirst Protect Applications provides the ability to add applications and distribute them to supported

devices managed by MobileFirst Protect Devices. This includes the MobileFirst Protect App Catalog, an on-device

application for users to view, install, and receive device notifications when apps have available updates.

http://www.maas360.com/products/mobile-application-management/

Mobile Application Management

• Deploy custom enterprise app catalogs

• Blacklist, whitelist & require apps

• Administer app volume purchase programs

Prerequisite Products • IBM MobileFirst Protect Devices


Metrics


Authorized User








IBM Security

8

IBM MobileFirst Protect Expenses

IBM MobileFirst Protect Expenses allows the administrator to create data usage policies and assign them to

supported devices that are managed by MobileFirst Protect Devices, and assign these policies at a device, group,

or global level, and configure alert thresholds and messaging for both in network and roaming data usage.

Prerequisite Products • IBM MobileFirst Protect Devices

http://www.maas360.com/products/mobile-expense-management/

Mobile Expense Management

• Monitor mobile data usage with real-time alerts

• Set policies to restrict or limit data & voice roaming

• Review integrated reporting and analytics


Metrics


Authorized User







IBM Security

9

IBM MobileFirst Protect Secure Mail

IBM MobileFirst Protect Secure Mail provides a separate and secure office productivity application for users to

access and manage email, calendar, and contacts. It is able to control emails and attachments to prevent data

leakage by restricting the ability to forward or move content to other applications, to enforce authentication, restrict

cut, copy, and paste, and lock down email attachments for view only.

http://www.maas360.com/products/secure-mail/

Secure Mail

• Contain email text & attachments to prevent data leakage

• Enforce authentication, copy/paste & forwarding restrictions

• FIPS 140-2 compliant, AES-256 bit encryption for data at

rest


Metrics


Authorized User





IBM Security

10

IBM MobileFirst Protect Secure Browser

IBM MobileFirst Protect Browser is a full-featured web browser that enables secure access to corporate intranet

sites and enforces compliance of content policies by defining website filtering and security policies to ensure that

users only access approved web content that is based on a number of content categories, such as social

networking, explicit, or malware sites. It includes the ability to disable native and third-party web browsers either

through application policy or blacklisting when combined with MobileFirst Protect Devices. It allows whitelist

exceptions to websites, restrict cookies; copy, paste, and print features; and enables Kiosk mode.

http://www.maas360.com/products/secure-browser/

Secure Browser

• Enable secure access to intranet sites & web apps w/o VPN

• Define URL filters based on categories & whitelisted sites

• Restrict cookies, downloads, copy/paste & print features


Metrics


Authorized User





IBM Security

11

IBM MobileFirst Protect Application Security


Metrics


Authorized User

IBM MobileFirst Protect Application Security provides additional data protection for enterprise applications that use

MobileFirst Protect WorkPlace SDK during development or the MobileFirst Protect application wrapping capability.

MobileFirst Protect Application Security integrates the app with the IBM MobileFirst Protect Secure Productivity Suite.

This enables single sign-on, intranet access through MobileFirst Protect Mobile Enterprise Gateway, and enforcement of

data security settings.

http://www.maas360.com/products/application-security/

Application Security

• Contain enterprise apps with a simple app wrapper or SDK

• Enforce authentication & copy/paste restrictions

• Prevent access from compromised devices

Prerequisite Products • For remote wipe, single sign on, in-app VPN: requires either:

- IBM MobileFirst Protect Devices

- IBM MobileFirst Protect Management Suite





IBM Security

12

IBM MobileFirst Protect Content


Metrics


Authorized User

IBM MobileFirst Protect Content allows the administrator to add and distribute documents to supported devices. It

includes MobileFirst Protect Doc Catalog, an on-device, password-protected container that provides a secure and simple

way for users to access, view, and share documents. It includes seamless access to distributed content and repositories

such as Microsoft SharePoint, Box, and Google Drive. Access to private Microsoft SharePoint and Microsoft Windows

File Shares are available with the MobileFirst Protect Enterprise Gateway. Documents managed through MobileFirst

Protect can be version controlled, audited, and secured through data loss prevention (DLP) policy options, such as

require authentication, restrict copy-paste functionality, and block from being opened or shared in other applications.

http://www.maas360.com/products/document-management/

Mobile Content Management

• Contain documents & files to prevent data leakage

• Enforce authentication, copy/paste & view-only restrictions

• Access IBM MobileFirst Protect distributed content &

repositories such as SharePoint, Box & Google Drive





IBM Security

13

IBM MobileFirst Protect Document Editor


Metrics


Authorized User

MobileFirst Protect Document Editor provides users with the ability to create, edit, search, and save content securely, all

in an encrypted container on iOS and Android devices.

Prerequisite Products • IBM MobileFirst Protect Content

Secure Document Editor

• Create, edit and save content securely, all in an encrypted

container on iOS and Android devices

• Collaborate on Word, Excel, PowerPoint and text files

• Change fonts and insert images, tables, links and more

• Perform searches within documents






IBM Security

14

IBM MobileFirst Protect Document Sync


Metrics


Authorized User

Prerequisite Products • IBM MobileFirst Protect Content

Secure Document Sync

• Seamlessly sync user content across managed devices

• Applies policies to content such as restricting copy/paste and

blocking opening or sharing in unmanaged apps

• Store content securely in both the cloud and on devices


MobileFirst Protect Document Sync provides users with the ability to easily and securely synchronize user content across

managed mobile devices. Administrators can ensure that policies, such as restricting cut, copy, and paste, and blocking

content from being opened or shared in other apps or the policies are defined and are in place for user content across

devices. Content is stored securely, both in the cloud and on the device, and accessed only through the MobileFirst Protect

Document Catalog





IBM Security

15

IBM MobileFirst Protect Content Service


Metrics

✔ Managed Client Device

Authorized User

Prerequisite Products • One of the following :

- IBM MobileFirst Protect Applications

- IBM MobileFirst Protect Content

Cloud Content Service

• Host and distribute corporate documents and apps with a globally

optimized distribution network

• Reduce network load and increase download performance for

users

• Achieve maximum scalability

IBM MobileFirst Protect Content Service provides users with the ability to upload and store application packages and

documents to MobileFirst Protect's cloud storage system.

Corequisite Products IBM MobileFirst Protect Content Service Storage

IBM MobileFirst Protect Content Service Bandwidth

Note: Clients must purchase a quantity of each of the above products

in addition to the Content Service product.


IBM Security

16

IBM MobileFirst Protect Content Service Storage


Metrics

✔ Gigabyte




- IBM MobileFirst Protect Productivity Suite

- IBM MobileFirst Protect Content Suite

Cloud Content Service Storage

• Licensed in increments of 1 GB

• Total storage is shared across all content, including: Enterprise

Apps, Documents & Windows Applications

• Cloud Storage is capped at clients entitlements; no overage

MobileFirst Protect Content Service Storage provides users the ability to purchase a total amount of data storage available

for use with the MobileFirst Protect Content Service.


IBM Security

17



Metrics

✔ Gigabyte






Cloud Content Service Bandwidth

• Licensed in increments of 1 GB

• Total bandwidth is shared across all devices

• Clients should purchase the total amount of bandwidth required for

regular document and app distribution

• Overage rates apply for bandwidth used over entitlement.

MobileFirst Protect Content Service Bandwidth provides users the ability to purchase the total amount of bandwidth available

for use with the MobileFirst Protect Content Service.


IBM Security

18

Seamless Enterprise Integration


IBM Security

19

IBM MobileFirst Protect Gateway for Browser


Metrics


Authorized User


- IBM MobileFirst Protect Secure Browser


MobileFirst Protect Gateway for Browser allows supported devices to access approved internal websites without requiring a

full-device level, virtual private networks (VPN) connection.

http://www.maas360.com/products/mobile-enterprise-gateway/

Mobile Enterprise Gateway for Browser

• Enable IBM MobileFirst Protect Secure Browser to access

enterprise intranet sites, web apps & network resources

• Access seamlessly & securely without needing a VPN

session on mobile device







IBM Security

20

IBM MobileFirst Protect Gateway for Apps


Metrics


Authorized User


- IBM MobileFirst Protect Secure Application Security


MobileFirst Protect Gateway for Apps provides users, outside the enterprise network, secure, seamless access to internal

application resources without requiring a full-device, VPN connection.


Mobile Enterprise Gateway for Apps

• Add in app VPN to IBM MobileFirst Protect Application Security

to integrate behind-the-firewall data in private apps

• Incorporate enterprise data without a device VPN session







IBM Security

21

IBM MobileFirst Protect Gateway for Documents


Metrics


Authorized User




MobileFirst Protect Gateway for Documents provides users, outside the enterprise network, secure, seamless access to

internal Microsoft SharePoint sites, Microsoft Windows File Shares, and other file stores without requiring a full-device, VPN

connection


Mobile Enterprise Gateway for Docs

• Enhance MaaS360 Mobile Content Management with secure

access to internal files, e.g. SharePoint & Windows File Share

• Retrieve enterprise documents without a device VPN session







IBM Security

22

IBM MobileFirst Protect Threat Management


Metrics

✔ SaaS offering will

work with On Prem

Managed Client Device

Authorized User


- IBM MobileFirst Protect Devices


IBM MobileFirst Protect Threat Management provides the ability to detect, alert, and remediate enterprise malware on iOS

and Android devices. Additionally, it provides advanced jailbreak, root and hider detection with over the air updates for

security definitions. Administrators can configure compliancy policy on these advanced threats and immediately remediate

the vulnerability, improving the security of BYOD and corporate owned devices.

Threat Management

• Proactively manage mobile threats in real time

• Reduce risk of sensitive data leakage of corporate and personal

information

• Take automated actions to reduce and mitigate risk

• Support both BYOD and Corporate Owned devices

http://www.maas360.com/products/mobile-threat-management/







IBM Security

23

IBM MobileFirst Protect Laptop


Metrics

✔ Client Device

IBM MobileFirst Protect Laptop provides you with the ability to enroll, configure, manage, secure, and report on Mac OS X

and Microsoft Windows PC based devices alongside smartphones and tablets. Organizations can maintain consistent

security policies and profiles across both corporate and employee-owned devices within the same MobileFirst Protect

management console.

Laptop Management

• Gain visibility into Hardware, Software, OS and Patch Inventory

• Provide OS and Windows Application Update patch compliance

• Take control of devices over the air: lock, shut down, restart,

distribute software

• Provide real-time security alerts and reports


http://www.maas360.com/products/laptop-management/





IBM Security

24

IBM MobileFirst Protect Laptop Lifecycle


Metrics

✔ Client Device

IBM MobileFirst Protect Laptop Lifecycle Management provides the capabilities of MobileFirst Protect Laptop and adds the

following capabilities: Software Distribution

Laptop Lifecycle Management

• Gain visibility into Hardware, Software, OS and Patch Inventory

• Take control of devices over the air: lock, shut down, restart,

distribute software

• Provide real-time security alerts and reports


• Adds Software Distribution


Corequisite Products IBM MobileFirst Protect Content Service Storage


Note: Clients must purchase a quantity of each of the above products in addition to the this product. Software

distribution requires storage and bandwidth to function.





IBM Security

25

IBM MobileFirst Protect Laptop Location


Metrics

✔ Client Device

IBM MobileFirst Protect Laptop Location provides the ability to locate, and retrieve historical locations of laptops.

Laptop Location

• Locate devices in real-time

• View location history


Prerequisite Products One of the following:

- IBM MobileFirst Protect Laptop

- IBM MobileFirst Protect Laptop Lifecycle





IBM Security

26

IBM MobileFirst Protect Laptop Security


Metrics

✔ Client Device

IBM MobileFirst Protect Laptop Security provides the ability to update 3rd party anti-virus software definitions. Clients are

required to license the 3rd party software.

Laptop Security

• Update AntiVirus Definitions

• Ensure the latest Antivirus protection

• Reduce risk and data loss


Prerequisite Products One of the following:

- IBM MobileFirst Protect Laptop

- IBM MobileFirst Protect Laptop Lifecycle





IBM Security

27

Product Suites


IBM Security

28

IBM MobileFirst Protect Management Suite

Includes:

• IBM MobileFirst Protect Devices

• IBM MobileFirst Protect Applications

• IBM MobileFirst Protect Expenses

• IBM MobileFirst Protect Content (SaaS Only)

Purchased Separately: If customers plan on using cloud storage for enterprise apps, they must also

purchase the following:

• IBM MobileFirst Protect Content Storage

• IBM MobileFirst Protect Content Bandwidth


Metrics


Authorized User


IBM Security

29

IBM MobileFirst Protect Productivity Suite

Includes:

• IBM MobileFirst Protect Secure Mail

• IBM MobileFirst Protect Secure Browser

• IBM MobileFirst Protect Applications

• IBM MobileFirst Protect Application Security


Purchased Separately: If customers plan on using cloud storage for enterprise apps, they must also





Metrics


Authorized User


IBM Security

30

IBM MobileFirst Protect Content Suite

Includes:

• IBM MobileFirst Protect Content

• IBM MobileFirst Protect Document Editor

• IBM MobileFirst Protect Document Sync


Purchased Separately: If customers plan on using cloud storage for documents, they must also





Metrics


Authorized User


IBM Security

31

IBM MobileFirst Protect Gateway Suite

Includes:

• IBM MobileFirst Protect Gateway for Browser

• IBM MobileFirst Protect Gateway for Documents

• IBM MobileFirst Protect Gateway for Applications


Metrics


Authorized User


IBM Security

32

IBM MobileFirst Protect Professional

Includes:

• IBM MobileFirst Protect Management Suite

• IBM MobileFirst Protect Productivity Suite

Purchased Separately: If customers plan on using cloud storage for enterprise apps or documents,

they must also purchase the following:




Metrics


Authorized User