mobilecho: 5-Step Deployment Plan for Mobile File Management

mobilEcho:

Overview

GroupLogic’s mobilEcho is the industry’s first and only secure Mobile File Management (MFM) solution for iPads. mobilEcho enables IT organizations to provide secure and managed corporate file access for enterprise iPad users, based on existing security and access control policies. With the simplicity demanded by end-users, and the security and management required by enterprise IT, mobilEcho provides organizations with the foundation for their mobile file management strategy.

mobilEcho consists of an iPad app which is downloaded for free from the Apple App Storei and a server component which is purchased or trialed from GroupLogic.ii The server is installed on the Windows file servers that store the files that your mobile users need to access. If outside your corporate network, the mobilEcho iPad client needs to connect through your firewall to the mobilEcho file server running on your Windows server.

One server can optionally be designated as the mobilEcho client management server. All mobilEcho clients will receive their configuration over-the-air (OTA) from the server, both the first time the user configures mobilEcho and also on subsequent connections, to refresh the settings on the mobile device.

In planning your deployment of mobilEcho, you need to understand the topology of the solution and then determine the best path for your organization.

i_{http://itunes.apple.com/us/genre/mobile-software-applications/id36?mt=8} ii_{http://www.grouplogic.com/}

5 Easy Steps to Deploy mobilEcho

1. Secure iPad with a Passcode Lock and backup with encryption

Using the iPhone Configuration Utility (ICU) http://www.apple.com/support/iphone/enterprise/ or your mobile device management (MDM) solution, set your devices to require a Passcode Lock. Apple Data Protection hardware encryption requires a Passcode Lock be enabled in order to provide encryption, so you must use the ICU or your MDM solution to require that devices have a PIN. This step will also secure your back up in iTunes. Your iOS device is backed up every time it is synched to iTunes. This back up is a potential security risk that will be secured automatically once your device is configured to "require a device PIN" on your iTunes backup. Please read the Group Logic ‘Enterprise Security with mobilEcho’ Whitepaper to fully understand the security elements of mobilEcho and the iPad.

Apple documentation notes that: “If you protect your iPhone or iPod touch with a passcode, you will be prompted to enter the passcode when you connect to iTunes. Once you successfully enter the passcode, iTunes will recognize that device as authorized and you will not need your passcode to back up or sync.” [Reference http://support.apple.com/kb/ht1766]

2. Select your method of traversing the firewall

When outside your corporate network, mobilEcho clients need to connect from the Internet to the mobilEcho server running inside your firewall. mobilEcho can communicate securely using HTTPS, with or without a VPN, so your options are:

t

71/

.BZ
BMSFBEZ
CF
DPOöHVSFE
PO
ZPVS
NPCJMF
EFWJDFT
GPS
PUIFS
BDDFTT
QVSQPTFT
BOE
NBZ
CF
PO
EFNBOE
JG
ZPV
IBWF
DPOöHVSFE

Certificate Authentication.

t

)5514
SFWFSTF
QSPYZ

)BT
UIF
BEWBOUBHF
PG
OPU
SFRVJSJOH
B
NBOVBM
71/
DPOOFDUJPO
BOE
NBZ
BMTP
BMSFBEZ
CF
DPOöHVSFE
GPS
BDDFTT
PG
enterprise apps through the firewall.

t

0QFO
)5514
QPSU
UP
UIF
TFSWFST
SVOOJOH
NPCJM&DIP

5IJT
JT
BQQSPQSJBUF
GPS
FOWJSPONFOUT
XIFSF
TFDVSJUZ
UISFTIPMET
BSF

MPXFS
BOE
convenience is valued.

For more information on VPN on Demand with Certificate Authentication, check here: http://support.apple.com/kb/ht1288

For information on configuring an HTTPS reverse proxy, consult the Microsoft Forefront Threat Management Gateway (formerly ISA) [http://www.microsoft.com/forefront/threat-management-gateway] or documentation on other reverse proxy solutions

[http://en.wikipedia.org/wiki/Reverse_proxy].

3. Determine which servers your mobile users need

4. Configure mobilEcho client management profiles for your users or groups

With mobilEcho client management profiles, you can centrally configure the mobilEcho client security settings, application settings and server settings. Management profiles allow complete control of the mobilEcho app’s capabilities.

For each user or group, configure the appropriate Security settings. These settings can require an application lock password and specify password complexity requirements. Users can be prevented from changing and removing their mobilEcho management profiles.

[mobilEcho Profiles - Security settings]

For each user or group, configure the appropriate Application settings. These settings determine which functions of the mobilEcho app are enabled. Keep in mind that mobile users may or may not need the same breadth of functions available to desktop users, so it may be okay to disable privileges from your mobilEcho app.

For each user or group, configure the appropriate Server settings. These settings determine how often the user must log into servers and automatically provision the list of servers that appear in the mobilEcho app.

[mobilEcho Profiles - Server settings]

5. Deploy mobilEcho to users via email or webpage

Upon completion of these steps, you can deploy mobilEcho to iPad users in your organization and deliver productivity while securing the organization’s data against loss.

Send your users an email or link to a webpage containing two required items:

8

Hotlink this button to the invitation file generated by the mobilEcho client management server. This invitation file connects the mobilEcho app to your mobilEcho management server. The user is prompted to authenticate with the Active Directory credentials and is then automatically configured OTA with their assigned user or group profile.

Summary

Deploying mobilEcho is easy and puts your organization on the path of establishing a secure mobile file management strategy. mobilEcho enables your enterprise to provide secure access to enterprise file servers for iPad users, eliminating the need for work-arounds and third-party mobile applications that compromise the security of corporate files and assets. Configurable and deployable across the enterprise within minutes, mobilEcho promotes efficient IT management while ensuring corporate security and compliance standards are met. Enterprise end-users of mobilEcho can access, browse, search and interact with corporate files as well as cache files for offline access, improving overall mobile worker productivity regardless of job function.

About GroupLogic

GroupLogic® helps enterprise and education IT organizations simply and securely integrate diverse computing platforms into enterprise environments, connecting employees and students to enterprise files, content and assets to facilitate a more productive and efficient work environment. With more than two decades of experience, GroupLogic leads the marketplace in helping IT organizations effectively and easily manage the integration of Apple products into the enterprise ecosystem. Whether IT organizations are looking to integrate existing Apple assets, purchase additional Apple hardware like Macs and iPads, or want to take advantage of the hardware costs savings that accompany the adoption of IT consumerization, GroupLogic enables IT organizations to easily and securely manage the rapid integration of diverse platforms while ensuring resources are optimized. GroupLogic enables the enterprise to focus on what is really important – competitive differentiation, improved employee productivity, mitigated risk and reduced costs. GroupLogic’s proven