Enterprise Mobility Roadmap Brian Uffelman

Transcription

1 Enterprise Mobility Roadmap Brian Uffelman Dir. Product Management, Enterprise Mobility 1

2 Disclaimer Any information regarding pre-release Symantec offerings, future updates or other planned modifications is subject to ongoing evaluation by Symantec and therefore subject to change. This information is provided without warranty of any kind, express or implied. Customers who purchase Symantec offerings should make their purchase decision based upon features that are currently available. Presentation Identifier Goes Here 2

3 Agenda Top Mobility Goals Symantec App Center Solution Upcoming Releases and Priorities Near-Term Mobile Roadmap 3

4 Welcome to Vision Day 4! 4

5 Ultimate Goal of the Mobility Address immediate concerns about MDM/MAM/BYOD/CY OD To increase User and organization productivity While providing Security, Protection, Control 9

6 Customer Jobs in User-Control Era Reconciling conflicting IT and end user desired outcomes Help me maximize productivity on any device Help me maximize user productivity and protection Users Choose my device(s) and use them for business and personal Gain access to and network Provision my own apps Collaborate with others Avoid calling help desk IT Configure and secure all endpoints accessing the corporate network Protect critical business data Minimize risk of attack Reduce cost of ownership 6

7 Presentation Identifier Goes Here 7

8 Enterprise Mobility Management (EMM) 8

9 Mobile Use Cases What smartphone/tablet applications do you currently use for work?" Calendar SMS (texting) Instant messaging/chat (not SMS/texting) 40% 58% 73% 85% Note taking application Social networks (e.g. LinkedIn, Facebook) Specific line of business applications (e.g. sales) Employee intranet or company portal Travel planning and status Expense tracking and/or approval Data dashboard or business intelligence application Team document sharing sites (e.g., SharePoint) Web meeting or webconferencing Microblogging (e.g. Twitter) Wikis for internal information sharing 39% 36% 32% 28% 25% 25% 21% 20% 19% 18% 15% Base = 2,317 North American and European information workers who use a smartphone for work Source: Forrsights Workforce Employee Survey, Q

10 Focus on Four Key Customer Jobs /Goals Manage Access & Identity Data Management & Protection Manage & Protect Any Device Leverage Mobility to Maximize Productivity 10

11 Mobile Workforce Productivity Vision The What Information protection across three control points NETWORK / USER ACCESS Today: Mobile Devices Mail Inspection APPS Core Apps App VPN AppStore Apps Identity, Info GW DLP/Enc, PKI. Cloud Applications Browser Synch And Share App Protection Cloud Storage DEVICE Tomorrow: Convergence STOP Control Secure Insight Private Cloud 1 1

12 Mobile Workforce Productivity Vision User: Joe? What is required to make the vision happen? Cloud Applications Cloud Storage Private Cloud 1 2

13 Mobile Workforce Productivity Vision The What Information protection across three control points NETWORK / USER ACCESS Coming Soon Today: Mobile Devices Secure App Proxy (beta) APPS mpki Support Secure Gateway Portfolio Integrations Cloud Applications Productivity Apps Secure Workspace Secure App Ecosystem Cloud Storage DEVICE Coming Soon Tomorrow: Convergence App Center Mobile Security App Insight Private Cloud 1 3

14 What We ve Accomplished 1H 2013 Dec 2013 Jan 2014 Apr 2014 Q3CY Integrated MDM and MAM Console ios 7 MDM Support MDM Mobile Core Technology Integration MPKI Integration Symantec Sealed Launch App Proxy (Beta) Secure Web Browser Bundled Encryption Norton Mobile Security Integration Proxy App Proxy Partner API s Samsung SAFE support Windows Phone 8/8.1 support Multi-tenancy Performance, Scalability & UX enhancements ACA and platform 18

15 Symantec Sealed Program 72 Partners, 147 Apps! Mail Native app Symantec Secure Ikonic Mail+ Secure text/messaging TigerText Medigram Gryphn ArmorText Calendar Symantec Secure Mail Readdle Calendars 5 LookeeLoo Meebles Document reading/editing GoodReader Quickoffice Polaris Office File sync/share Norton Zone Box Accellion Note Taking Notes Plus NotePad Pro-iTech Tapose Forrester Advisory Day Confidential: Do Not Distribute 19

16 Symantec App Center 4.4 Release Proxy for access control and compliance App Proxy GA for sealed apps and internal enterprise apps Mobile Security integration entitlement and reporting of Android mobile security with Norton Mobile Security App Platform usability and performance Performance and usability improvements for user agent, App Center dashboard Enhanced platform integration capability wrapping APIs, additional app management, tenant creation API (in multitenancy mode) 20

17 5.0 Release Summary MDM - Address SAFE and Windows Phone 8.1 with basic MDM capabilities Mobile Security Standalone product support Platform/Server - Performance/scalability, Multitenancy and selected UI improvements Platform/ACA UI usability and performance improvements MAM - App Management Command APIs; Advanced App Configuration Product re-naming and EOL of older products

18 Upcoming Releases and Key Priorities 22

19 Product Priorities - 3 Horizons H1 H2 H3 Broaden Platform Support Complete Android and Windows 8 integrations Gateways Enterprise platform capabilities Accelerate Symantec Technology Integration Content management with Zone, integrated with Mobile Integrate device security & App Insight Differentiated SYMC integrations DLP, PKI, Identity and Security Gateways Multi-tenancy and scalability advancements Deliver on Convergence - Devices, Apps, Data Deliver and protect corporate apps and content on any endpoint - Mobile, Mac, PC with single policy Control point for content inspection and access across cloud services and mobile, integrated with endpoint PC 23

20 Longer Term Areas of Investigation Horizon 2 and 3 Focus Area Area of investigation Identity and Access Biometric based authentication to device, app or workspace integrated with corporate AD / Identity Eliminates the need for a corporate password Data Protection and Productivity enablement Enable free flow of data to any environment while maintaining security by embedding data policies at the content level Requires ability to tag, track and enforce policy across any app leverage Encryption and DLP assets Intelligence Provide the enterprise with a rich set of actionable intelligence allowing them to have complete visibility into usage patterns, risks, etc. Leverage Symantec s rich set of big data assets including Mobile Insight, Norton Mobile Security, Wrapped Apps, etc Converging Endpoint Management and Protection One solution to manage and protect any endpoint Federated App Store across any device based on user role and access 24

21 Short Term Product Roadmap January Symantec Sealed Launch Secure App Proxy (Beta) Secure Browser Bundle Encryption April Norton Mobile Security (NMS) Integration Gateway Secure App Proxy Multi-tenancy Partner API s Norton Zone Q3CY Samsung SAFE Support Android MDM Core Windows Phone 8.1 for MDM/MAM Performance, Stability and Usability Enhancements ACA and Platform External API enhancements Expanded multi-tenancy support CY / 5.2 (preliminary) DLP Integration* Identity Gateway Integration* Expanded Symantec Productivity App Suite* Mobile Insight* Cloud Data Security * VIP integration with ACA* Private Cloud Offering* Data Tagging and Monitoring* Zone for Content Center* Converged Management and Protection - Mobile, Mac, PC* Productivity Apps Device Mgmt. App Protection Threat Protection Productivity Apps Device Mgmt. App Protection Threat Protection Productivity Apps Device Mgmt. App Protection Threat Protection Productivity Apps Device Mgmt. App Protection Threat Protection Identity Identity Identity Identity Network Network Network Network Convergence Convergence Convergence Convergence = No Capabilities = Below Competition = Parity with Competition = Better than Competition = Sustained Differentiator * Planned but not committed 25

22 Focus on Four Key Customer Jobs /Goals Manage Access & Identity Data Management & Protection Manage & Protect Any Device Leverage Mobility to Maximize Productivity 26

23 Symantec Mobility Roadmap Manage Access & Identity Data Management & Protection Manage & Protect Any Device Leverage Mobility to Maximize Productivity Integration of One-Time Passwords Multi-Account SSO Federated Identity Certificate management at the device, apps, and workspace with delegate authority Track and Monitor Data Flows Data Protection via Integration with Symantec DLP Enforce Data Policies Data Classification Virtualized Content Access Data Rights Management Cloud Data Policies Application Reputation Integrated Network Threat Prevention Security Application Management and Protection for Traditional Devices Context Aware Application Policy Traditional Device Support Mobile OS Support Support Support for Operational Devices Managing Next Gen Connected Devices Blacklisting/Whitelisting of Apps based on App Insight Managing Attachments Simplified Agent Experience Symantec Sealed Personas Productivity Apps: PIM ( ; Calendar; Contacts) Productivity Apps: Secure Browser (Intranet Access) Productivity Apps: File Sync & Share Productivity Apps: Secure Messaging (SMS) Productivity Apps: SharePoint/Network File Share/Cloud Connector IT Productivity: Providing Deployment Best-Practice IT Productivity: Ensure Business Compliance IT Productivity: Simplified Admin Experience 27

24 SYMANTEC MOBILITY CENTER: Beyond

25 Top Mobile DLP Use Cases Monitor and restrict data flows to and from mobile endpoints (attachments, content, mail flow policies, etc) Protect information/data flowing to and from an app on a mobile endpoint Monitor on-device data and enforce data sensitivity policies on mobile endpoints (similar to PC/Desktop functionality) Monitor/Restrict/Enforce data flow between apps Monitor/Restrict/Enforce data from the device to attachments (USB, Datacard, Bluetooth) Classify data based on sensitivity or confidentiality Enforce Data Confidentiality Policies 29

26 Future Vision: End-to-End Data Protection = Next Gen Mobility Agent Cloud Services DMZ Data Policy Controls IAM DLP ediscovery Internet Data Policy Controls Encryption IAM DLP Endpoint Management ediscovery Gateway 30

27 Why do I need App Reputation? With BYOD, user and corporate data live together so when apps ask the users for permission to access data it impacts your organization as well. Cost to determine if each individual app is safe is prohibitively expensive - Mobile Insight provides a behavior-based malware detection along with risk management approach to screening mobile apps Helps enterprise users really understand what the mobile apps are really doing and what Enterprise data they have access to 31

28 Malware Isn t The Only Concern Even legitimate apps can Read and collect private data from the device Embed annoying ad libraries to monetize free apps Drain battery and consume bandwidth, costing money and decreasing device lifespan Users demand more from mobile security malware detection is the table stakes 32

29 Mobile Insight Statistics Russia China ,200,456 Signers (Publishers) Majority of Bad Actors Stores Crawled Continuously APKs 10,732,318 APKs w/ High Severity Privacy Leaks 1,423,876 App titles 3,413,556 Malicious APKs 1,066,611 APKs w/ Ad Libraries 4,069,030 APKs w/privacy Leaks 5,751, Thousand new apps processed every 24 hours 1 trillion rows of metadata 33

30 How Mobile Insight will work for you 4. App Center provides application details back to admin to make policy decisions 1. App Center sends request for app information 3. Information is fed back to confirm if the app poses any threat or annoyances 2. Mobile Insight retrieves information about the app SECURITY Classifies apps as trusted, unknown or malware PRIVACY Identifies apps that put your Enterprise information at risk GREYWARE Stops annoyances like Madware and other intrusive behaviors PERFORMANCE Identifies apps that can excessively drain battery or use large amounts of data REAL WORLD INFORMATION We run apps to reports on unusual observed, actual behavior NOISE & FEAR REDUCTION Accurate reporting of the highest potential privacy risks and most intrusive apps Symantec Confidential 34

31 Leveraging Mobile Insight Providing necessary intelligence for your enterprise users Allowing admins to inspect apps for malware and policy compliance prior to distributing the apps into Enterprise Using mobile insight intelligence to blacklist apps with harmful characteristics like ad network, data leakage risks, etc 36

32 Device Management for BYOD & Corp End User Devices Enabling personal connectivity to corporate services Near term Medium term Samsung SAFE and Windows Phone 8.1 BYOD Enrollment, inventory, Actions (locate, lock, wipe, etc.) SAFE delivery/removal of apps SAFE & Windows Phone 8.1 Exchange ActiveSync, passcodes, restrictions and WiFi profiles Extending services cert uses to SAFE, WP8.1 and cert delivery from Microsoft Certificate Authorities Extend BYOD MDM settings to ios 8, Android 5.0, Windows Phone 8.2 MDM updates 37

33 Enhancing App Center for Operational Device Management Medium-Long Term - Operational MDM feature improvements ios & Android operational device simplification Near-term App Center device management handling Improve licensing and device targeting to support operational device scenarios End-end operational lifecycle designed into App Center Multi-user support for App Center enrollment/management Simplified operational device setup, including Apple Device Enrollment program Full OTA profile handling Kiosk/Supervised device improvements Longer Term Extended Android manufacturer APIs Windows Phone operational APIs 38

34 Brand Strategy TODAY Symantec is viewed as a collection of products and brands, and is known as an AntiVirus company. FY15 Symantec is the brand of choice and is the information protection authority that instills the confidence to do anything FY16-19 Symantec is viewed as a thought leader making the world a safer place by delivering innovative, integrated solutions to customers most critical technology and information problems. 39

35 Seamless Embedded Mobile User Authentication Seamless Certificate Management & Usage Near term: Extending WiFi, VPN and EAS certificate delivery to new platforms Medium term: Cert lifecycle automation Certs for app wrapping connectivity Longer term: Simplified authentication Embedded Two Factor User Authentication Near term: User and Admin portal VIP integration Medium term: VIP integrated into wrap layer Hardware root of trust Biometric authentication Integrated Access Manager Support Near term: Wrapped browser access to SAM App Center SAML SSO to web apps via SAM 40

36 Q&A Presentation Identifier Goes Here 41

37 Thank you! Brian Uffelman SYMANTEC PROPRIETARY/CONFIDENTIAL INTERNAL USE ONLY Copyright 2014 Symantec Corporation. All rights reserved. Presentation Identifier Goes Here 42