Citrix Enterprise Mobility more than just device management (MDM)

(1)

Citrix Enterprise Mobility

more than just device management (MDM)

(2)

(3)

(4)

Mobile

Windows

SaaS

Web

Customer Polling Europe: Number of Apps of different types until end 2013 - N=413 in percent

(5)

SaaS

SaaSSuites

Within secure Browser

Via Secure Browse

Micro-VPN

Windows

Apps & Desktops

Virtualized

Mobility Pack XA/XD

Micro-VPN

Web

Intranet

Within secure Browser

Via Secure Browse

Micro-VPN

Mobile

Micro apps

Within secure App Container

AppZone

Micro-VPN

(6)

Desktops

Data

BYO

Mobility

Corporate Apps

SaaS Apps

(7)

Mobile Workstyles are about

people

, not devices

Mobile Workstyles is about

how people can

work better

Through Mobile Workstyles,

people are getting more

productive, more creative and

collaborate better

(8)

(9)

(10)

Eine komplette

Lösung.

Völlige mobile

Freiheit.

Complete Mobility Solution

•

MDM solution

for corporate requirements

•

Unified Self-Service App Store

•

Secure container on the mobile device

through MDX technologies

•

Native mobile productivity apps: eMail,

Data, Browser

•

Follow me Apps & Data on any device

with federated SSO

•

Secure remote access and scenario

(11)

A complete solution

stack for

Management and

security of apps,data

and devices.

But what does

„complete“ mean?

Device Management

App Management

App

M

anagem

en

t

Business Apps

Data Management

SSO

–

Single

Sign

On

Sec

ure

R

em

ot

e

Ac

c

es

s

Productivity & Collaboration

(12)

(13)

XenMobile MDX Technologies

Wrap

MDX Packager

• Wrap native mobile apps • Deployed on XenMobile

Deliver

MDX Access

• App-specific VPN • Only trusted apps

Secure

MDX Vault & Interapp

(14)

(15)

(16)

(17)

(18)

MDX

Policy

Allow Camera



iCloud Backup



Disable printing



Require Authentication



Trusted Network Only



Enable DLP



Restrict outbound URL



InterApp Sharing



(19)

MDX

Policy

Allow Camera



iCloud Backup



Disable printing



Require Authentication



Trusted Network Only



Enable DLP



Restrict outbound URL



InterApp Sharing



Offline lease period

24 h

• Secure app containers

• Micro VPN

• Lock and wipe

• Inter-app controls

(20)

WorxWeb

Secure

Browsing

WorxMail

Email, calendar

& contacts

ShareFile

Follow-me

Data

GoToMeeting

Integrated

Collaboration

Podio

Social Team

Collaboration

Worx

(21)

WorxWeb

WorxMail

Secure Browsing

Zugriff auf Interne Web Applikationen

Volle inter-app Integration

Gewohnte Handhabung

MDX-gesichert

Mail, Kalender, Kontakte

Enterprise class Security

Gewohnte Handhabung

Volle inter-app Integration

(22)

WorxMail

Mail, Kalender, Kontakte

Enterprise Class Security

Gewohnte Handhabung

Volle inter-app Integration

MDX-gesichert

• Sicherer E-mail Body und Attachments

• “Open in” Kontrolle zur Identifizierung von Datenlecks

• KEINE Aufdeckung des Exchange Servers ins Internet

• Versandt der e-Mail mit ShareFile Attachments

(23)

WorxMail

_Internet

WorxMail - Übersicht

Firewall

Client Access Server

(CAS)

Micro VPN

NetScaler/

(24)

WorxWeb

24

WorkWeb

Sicherer Browser

Zugriff auf interne Web Applikationen

Volle inter-app Integration

Gewohnter Umgang

MDX-gesichert

• Intranet Browsing auf iOS und Android Geräten

-

Einfacher Zugriff auf SharePoint und jegliche andere Intranet Portale

• Gleicher Look/Feel wie beim native Browser

-

Safari auf iOS; Chrome auf Android

(25)

(26)

Mögliche Richtlinien für den Zugriff

Containment Feature

Policy Keyword(s) Default Value Description Pasteboard DisableCopy DisablePaste AppSecurityGroup PasteFromSystemClipboard TRUE None TRUE

Prevents user from using copy/cut in the managed app. Prevents user from using paste in the managed app. App security group for shared clipboard

Allows paste from either system or shared clipboard

Open-In DisableOpenIn TRUE Prevents user from opening documents with other apps from within the managed app.

iCloud DisableiCloud TRUE Prevents managed app from using iCloud storage for documents and settings. Printing DisablePrinting TRUE Prevents user from printing documents from the managed app.

Camera DisableCamera TRUE Prevents user from using the device’s camera within the managed app. SMS/Text DisableSms TRUE Prevents user from using iOS text interface from within the managed app. Email DisableEmail TRUE Prevents user from using iOS Email interface from within the managed app. GPS DisableLocation TRUE Prevents app from using the GPS or location services within the managed app. Microphone DisableMicrophone TRUE Prevents app from using the microphone for audio recording within the managed

app. LaunchURL OutboundURLWhitelist OutboundURLBlacklist InboundURLWhitelist InboundURLBlacklist None None None None

Allows managed app to open specified URLs (i.e. start another app or webpage) Prevent managed app from opening specified URLs.

(27)

(28)

Data

(29)

• Secure data exchange (Windows, Mac, mobile Devices)

ᵒ Versioning & Comments

ᵒ Alerts and notifications for file activities

• Send files directly from Microsoft Outlook via ShareFile Plugin

ᵒ Reduces load of E-Mail Servers

• With Encryption – Secure at the Cloud

ᵒ Remote Wipe/Kill/Security

• Desktop Widget & Sync Tools

• Authentication through customers Active Directory

• Citrix ShareFile StorageZone

(30)

(31)

(32)

(33)

ShareFile with StorageZones

StorageZones is available in Tech Preview

Citrix-managed StorageZone (AWS)

Customer-managed StorageZone

• Choose where your data should be stored

(34)

Data Management with ShareFile StorageZones

ShareFile Personal Folder

On-Premise in your own DC

ShareFile Team Folder

Off-Premise at Citrix (AWS)

ShareFile Team Folder

On/Off Premise

Existing Network Share

CIFS File Server in your own DC

Online Editing

(35)

Use Cases

(36)

Provisioning for new Users

While Travelling

(37)

Provisioning

for new Users

Add the employee to the

Active Directory

Automated provisioning

of role related resources

Apps assigned based on

user’s identity

(38)

Provisioning

for new Users

End User’s perspective

Login at the own AppStore

(39)

While travelling

Access for all apps and files from any

device

(40)

(41)

User authorization required

Mobile device access

Allow local storage

Offline access allowed

Restrict document sharing

Printing allowed

Edit data

(42)

Account deactivation

App accounts & file access are

immediately removed

3rd Party SaaS App licenses

are instantly available for other

users

Change of

(43)

(44)

(45)