IBM Lotus Notes Traveler June 9, 2011 Jan Kenney - Product Manager, Lotus Notes Traveler & Lotus Mobile Connect

Size: px

Start display at page:

Download "IBM Lotus Notes Traveler June 9, 2011 Jan Kenney - Product Manager, Lotus Notes Traveler & Lotus Mobile Connect"

Sandra Jacobs
6 years ago
Views:

1 IBM Lotus Notes Traveler June 9, 2011 Jan Kenney - Product Manager, Lotus Notes Traveler & Lotus Mobile Connect 2011 IBM Corporation

2 Agenda Mobile Landscape and Trends Lotus Mobile Strategy Lotus Notes Traveler Timeline What's New Security Best Practices Reference Links Q&A

3 Mobile Landscape and Trends Consumer mobile usage is driving enterprise expectations Social networking 200m+ users accessing Facebook through mobile devices 40% of all Facebook users Mobile usage 2x in 2010 Instant messaging People that use Facebook on their mobile devices are twice as active on Facebook than non-mobile users Access internet Send photo/video All adults Ages Percent Source: Pew Internet, July

4 Enterprise mobile use cases are evolving In the past Today and tomorrow Only a few devices supported Many device platforms & form factors (Smartphones, tablets, etc) Communication focused devices Social and collaboration focused devices Phone, mail, calendar contacts, chat, SMS Social collaboration, meetings, VoIP, video Enterprise owned & controlled devices Bring your own device but enterprise controls management & security policies 4

5 Agenda Mobile Landscape and Trends Lotus Mobile Strategy Lotus Notes Traveler What's New Timeline Security Best Practices Reference Links Q&A

Lotus Mobile Strategy Enabling users to participate

solution for social business delivered as first-class

devices through the device platforms' associated

development tools to help partners and customers

information and applications Complete with enterprise

6 Lotus Mobile Strategy Enabling users to participate in social business on the move A comprehensive solution for social business delivered as first-class mobile platform experiences Made available on leading devices through the device platforms' associated distribution channel Supported by application development tools to help partners and customers reach their mobile user base by mobilize their information and applications Complete with enterprise governance capabilities that are easily managed on premises, hosted, or in the cloud 6

7 Agenda Mobile Landscape and Trends Lotus Mobile Strategy Lotus Notes Traveler Timeline What's New Security Best Practices Reference Links Q&A

8 IBM Lotus Domino has a rich client ecosystem , PIM, and more... Integrated collaboration on multiple devices, any network Offline / Online capabilities Clients managed centrally, easier administration Multi-OS support Out of the box features, cost effective and innovative IBM Lotus Notes Traveler Integrates with existing systems and applications IBM Lotus inotes IBM Lotus inotes IBM Lotus Notes 8

and PIM Data 9 Device security settings 2-way

installation Uses native device applications for

wired / wireless connections (CDMA, GPRS, GSM,

9 What is Lotus Notes Traveler? Automatic wireless delivery of Lotus Domino and PIM Data 9 Device security settings 2-way synchronization Over the air client or profile installation Uses native device applications for best integration (except Android) Works over all wired / wireless connections (CDMA, GPRS, GSM, WiFi, etc.) Administration support for device security policies and remote wipe

Server Requirements Operating System Requires Domino 8.5.

10 Server Requirements Operating System Requires Domino Server, Enterprise or Messaging configurations Runs in 32-bit or 64-bit mode on Domino server for Windows Linux Domino server is 32-bit only, so Traveler only runs in 32-bit mode on Linux Remote mail database support Windows Server 2003 Standard/Enterprise/R2 (32 and 64 bit) Windows Server 2008 Standard/Enterprise (32 and 64 bit) Windows Server 2008 Standard/Enterprise R2 (64 bit) Red Hat Enterprise Linux (RHEL) 5 Server (32 and 64 bit) SUSE Linux Enterprise Server (SLES) 10.2 (32 and 64 bit) SUSE Linux Enterprise Server (SLES) 11 (32 and 64 bit) Domino servers or above Remote mail OS can be anything that Domino supports Mail file templates Standard and inotes version 6.5 and above 10

Device Requirements Android 2.0.1 or greater devices, phone & tablets (incl.3.

3GS, iphone 4 ipad ipod Touch Apple OS 3.x Apple ios 4.

5th edition Nokia manufactured phones are only versions supported W indows

0, Standard, Professional and Classic versions Windows Mobile 6.

11 Device Requirements Android or greater devices, phone & tablets (incl.3.0) Apple Devices and Operating Systems Nokia Devices iphone, iphone 3G, iphone 3GS, iphone 4 ipad ipod Touch Apple OS 3.x Apple ios 4.x Nokia Series 60 3rd edition, including feature pack 1 and 2 Nokia Series 60 5th edition Nokia manufactured phones are only versions supported W indows Mobile Devices Windows Mobile 6.0, Standard, Professional and Classic versions Windows Mobile 6.1, Standard, Professional and Classic versions Windows Mobile 6.5, Standard, Professional versions Note that Lotus Notes Traveler version does not run on Windows Mobile 5 devices 11

12 Lotus Notes Traveler on the ipad Bullet 1 12

13 Lotus Notes Traveler , Calendar, Contacts Bullet 1 Symbian^3 coming soon 13

14 Recent Traveler Releases at a glance Lotus Notes Traveler Aug 2010 Security, Device managment, Full calendar support (ios), Linux server Dec 2010 adds Android support Ability to specify & enforce Domino security settings on Android March 2011 adds Android 3.0 (Xoom) support & battery efficiencies Enhancement/Fix List: coming soon!! June 2011 adds ios partial (Traveler only) wipe Enhancement/Fix List: beta in progress adds cross-platform enhancements IOS, Android & Nokia enhancements, Group Lookup and more... coming soon... 14

'Enterprise' level data plan - Security - 8.5.

15 Lotus Notes Traveler Value Statement beyond mail/calendar/contact 2-way sync (push) A one vendor solution! Integrated with Domino; Domino domain expertise and support Alignment with Notes/Domino development; insight into future direction & plans Preserve & extend Domino investment; No requirement for 'Enterprise' level data plan - Security capabilities leverage familiar Domino admin tools: For corporate or employee owned phones Set & enforce security rules, based on company policy Password length/strength/age Options to block unencrypted devices and camera usage Remote wipe (admin & self) per request and upon specified # of failed attempts end-to-end security via several supported network topologies Device management a no-cost mobile option for licensed Domino servers Automatic device updates Multiple device per user support Centralized view of connected users/devices & their status; Admins allow/deny access by policy Ease of configuration and deployment *Killer App* for IT shops!! Disaster Recovery Leverages mature Domino DR capabilities Serviceability - Problem reporting utility and intuitive log viewer/management tools Enhancements delivered frequently through.x (point) releases LotusLive - Common mobile solution for on-premise or LotusLive Notes cloud service, or a hybrid 15

16 Lotus Notes Traveler for Android/Apple/Nokia/Windows Mobile shipped: 10 March, 2011! 16

17 Enhancements in and beyond Lotus Mobile Installer - Automatic upgrade notification Linux server support RHEL 5, SuSE 10/11 Meeting Invitations on ios (create and accept) Corporate Name Lookup Scheduled Synchronization - sync during peak/off peak hours Data Roaming detection suspends sync; saves data costs & battery Support for W indows Mobile 6.5 Self service wipe! 17

18 Enhancements in and beyond - continued Ability to specify/enforce Domino security settings on ios and Android Device password (Android!) Prohibit ascending, descending and repeating sequences Require alphanumeric value (Android) Minimum password length (Android) Minimum number of complex characters Password expiration period Password history count Auto lock period (maximum) (Android) Wrong passwords before wiping device (Android) Prohibit camera Prohibit unencrypted devices Prohibit devices incapable of security enablement (Android) 18

19 8.5.3 Beta What's New!! (planned for 3Q) ios partial (Traveler only) wipe Android Enhanced Installation Android Home Page Widgets for mail and calendar Android Calendar Invite creation, quick switch days/weeks, week view hints Android Tap-to-dial for calendar entries Android Mail enhancements Copy/paste from clipboard Added a Send button to the compose form Android multi-line signature Added Android OS 3.0 Support Group name lookup Domino Mail-in db returned with Name Lookup Select which applications are allowed to sync for Apple devices Reply and Forward indicators from Apple devices Device approval Symbian^3 support 19

20 Android improved installation Single application (no separate Lotus Installer that was previously used) First time installing version 8.5.3, old Lotus Installer application will be removed if found Features from Lotus Installer such as automatic client update integrated into Lotus Traveler application If installing via built in Android browser, installation panels now pre-fill server name and user id Works with most browsers that use Android browser history features 20

21 Android improved installation (2) Lotus Traveler application now includes new options in the tools menu Check for updated software Uninstall application 21

following from the device Create meetings with

22 Android Chair side meeting support Now supports chair side meeting actions Meeting owner can now do the following from the device Create meetings with attendees Reschedule meetings Modify meetings Cancel meetings 22

23 Android Tap to dial for calendar Phone numbers included in a calendar entry are now hot spots that when clicked will dial the number. Number can be included in fields: Subject Location Description Supports conference dialing P and, (comma) characters interpreted as a pause '#' to enter the conference code ';' or 'x' to prompt user before sending codes 23

24 Android Calendar improvements W eek view now displays text (as much as display will allow) Performance improvements when navigating (swiping) between days Performance improvements when scrolling large calendars Revised menu experience for Android 3.x tablets 24

Android Mail Widgets Lotus Traveler mail widget now available to add to Android home screens Comes in large (3x3) and small (4x1) formats OS 3 tablet

25 Android Mail Widgets Lotus Traveler mail widget now available to add to Android home screens Comes in large (3x3) and small (4x1) formats OS 3 tablet widget includes smooth scrolling feature Click mail icon to launch the mail application Open individual mail items Compose message by clicking '+' symbol 25

Android Calendar Widgets Lotus Traveler calendar widget now available to add to Android home screens Comes in large (3x3) and small (4x1) formats OS 3 tablet widget

26 Android Calendar Widgets Lotus Traveler calendar widget now available to add to Android home screens Comes in large (3x3) and small (4x1) formats OS 3 tablet widget includes smooth scrolling feature Click calendar icon to launch the calendar application Open individual calendar items Create new calendar entries by clicking '+' symbol 26

results now display contact photo if available in local contacts Results

27 Android Type-ahead Lookup Server lookup done automatically when composing a new mail or searching for a contact using the Lotus Lookup application Lookup results now display contact photo if available in local contacts Results display person, group or mailin database silhouette if results contain different types 27

28 Android Select text Use 'Select Text' menu option to copy text from mail or calendar documents Long press inside another document or application and select 'Paste 28

29 Android Multi-line signature Multi line mail signatures now possible on Android devices Lotus Traveler->Settings>Applications Signature added to all new mail messages composed on device 29

30 Nokia Symbian^3 Support Symbian^3 devices now supported New SIS installation package created for S3 devices Device support includes (but not limited to) Nokia E7 Nokia C7 Nokia C6-01 Nokia N8 30

Nokia Encrypted device policy Only supported for Nokia Symbian^3 devices Requires Nokia Symbian Anna level firmware release Server policy can be defined to require

31 Nokia Encrypted device policy Only supported for Nokia Symbian^3 devices Requires Nokia Symbian Anna level firmware release Server policy can be defined to require that only encrypted Nokia devices are allowed to connect Prohibit unencrypted devices Device user must encrypt phone and mass storage using Nokia supplied utility 31

32 Apple ios Data only wipe Remote wipe option now available for Apple devices to remove only Lotus Traveler data Contacts Calendar Command available via self-service Traveler home page or administrator database 32

back to Traveler server until the administrator clears the wipe order Device

33 Apple ios Data only wipe (2) Data is removed from device, but profile or account settings remain As with all wipe operations, device cannot connect back to Traveler server until the administrator clears the wipe order Device user receives mail message on device indicating that wipe order was completed 33

Server Device Approval Policy If policy is enabled, administrator must explicitly approve end user device before it can access the Lotus Traveler service Set number of

34 Server Device Approval Policy If policy is enabled, administrator must explicitly approve end user device before it can access the Lotus Traveler service Set number of devices to allow before approval to zero if all devices must be pre-approved Optional address list can be used to notify administrator by mail when device approval is pending 34

35 Server Device Approval Policy (2) Lotus Traveler administration database keeps track of approval status Administrator uses Change Approval action to approve or deny Sort by Approval column 35

Server Lock sync applications for Apple Administrator policy set using Domino Lotus Traveler Settings Lotus Traveler server now enforces the Set value and

36 Server Lock sync applications for Apple Administrator policy set using Domino Lotus Traveler Settings Lotus Traveler server now enforces the Set value and prevent changes option for Apple devices Policy can turn mail, calendar or contacts off. Application still exists on device but will not receive or sync any data 36

37 Server Mail Routing and Lookup Mail routing configuration is no longer required on the Lotus Notes Traveler server Meeting notices are sent via the user's mail server's mailbox SMS messages (if configured) are sent via the user's mail server's mailbox Meeting notices no longer appear to be sent by the Lotus Notes Traveler server Corporate lookup (aka Name Lookup) requests are executed against the user's mail server's directory Previously all requests executed against the Traveler servers directory Will be more consistent with a Notes client's lookup results Change back to the old behavior by setting NTS_TRAVELER_AS_LOOKUP_SERVER=true in notes.ini on Traveler server Lookup results now include Group names and Mail-in databases 37

forward indicator set in the server mail copy Cannot yet keep

38 Apple ios Reply/Forward Indicators Mail replied to or forwarded from the Apple device will now have the reply or forward indicator set in the server mail copy Cannot yet keep reply/ forward indicators in sync with device still a current restriction 38

39 Agenda Mobile Landscape and Trends Lotus Mobile Strategy Lotus Notes Traveler Timeline What's New Security Best Practices Reference Links Q&A

40 40

41 Footnotes for previous slide 1. Whole devices can be encrypted, and can be enabled and enforced with the security policies in iphones that don't support hardware encryption can be blocked. The 3GS & 4G support hardware encryption, Original and 3G don't. Domino policies that admins can use to force the enablement of encryption and block unencrypted phones are: Prohibit unencrypted devices Prohibit devices incapable of security enablement 2. Storage cards can be encrypted. Data in native PIM/ applications is not encrypted except for Domino encrypted mail. 3. Domino Policies that admins can use to manage passwords are: Device password Prohibit ascending, descending and repeating sequences Require alphanumeric value Minimum password length Minimum number of complex characters Password expiration period Password history count Auto lock period (maximum) Wrong passwords before wiping device Dynamic policy changes (admin changes are automatically synchronized to the device without requiring user interaction) 41

On-device encryption ios - Except for early models (original and 3G) the iphone/ipads are password protected at the device level and, by definition, data is encrypted.

com/iphone/business/ integration/ Device policies, restrictions and strong encryption methods on iphone provide a layered approach to keeping your information secure.

42 On-device encryption ios - Except for early models (original and 3G) the iphone/ipads are password protected at the device level and, by definition, data is encrypted. The level of encryption is controlled by Apple and is described here: integration/ Device policies, restrictions and strong encryption methods on iphone provide a layered approach to keeping your information secure. iphone uses AES 256-bit hardware encryption to protect all data at rest. To further secure mail messages and attachments iphone uses Data Protection which leverages the unique device passcode to generate the encryption key. And, in the event of a lost or stolen iphone, all data and settings can be cleared by issuing a remote wipe command from Exchange or a Mobile Device Management server. Android - Mail, calendar, attachments, are fully under Traveler control and are all AES 256 encrypted. Contacts application comes with the OS and is outside of Traveler and therefore not encrypted by Traveler. Nokia/Symbian - Storage cards can be encrypted. Mail/PIM data is not encrypted except for Domino encrypted , but certain Symbian device models (E5, E52, E55, E72) support encryption, though not enforce-able by Traveler. Windows Mobile - Storage cards can be encrypted. Mail/PIM data is not encrypted except for Domino encrypted . 42

43 Traveler Companion for iphone/ipad Companion App for iphone/ipad; Read/compose Domino encrypted mail Free download available from Apple itunes Apps Store Coming soon password caching (enter password once per session) 43

Android Device security capabilities Traveler Mail and Calendar data encrypted (on phone storage or sdcard) Wipe and Password policies primarily based on Android 2.

44 Android Device security capabilities Traveler Mail and Calendar data encrypted (on phone storage or sdcard) Wipe and Password policies primarily based on Android 2.2 security capabilities: Device wipe to factory settings, sdcard wipe, Traveler data only wipe Alphanumeric device level password enforcement Android 2.1 and older not capable of device or sdcard wipe, or device level password enforcement Setting in the Traveler server security policy can control if these devices are allowed to connect to the Traveler server 44

Security Planning and Capabilities Remote Wipe Several wipe options available for Android/WM/ Nokia, Apple supports hard reset Hard reset device action removes all data and applications on device

45 Security Planning and Capabilities Remote Wipe Several wipe options available for Android/WM/ Nokia, Apple supports hard reset Hard reset device action removes all data and applications on device Wipe commands are delivered over TCP and SMS push channels (no SMS support on iphone) Wipe order remains in effect on the server until cancelled Admin can pullback request if caught before command activation. 45

46 Default Settings and Security Profiles LotusTraveler.nsf Default Settings view Alternative to Domino Traveler Settings in policies 46

47 Filtered access -Restrict access by device category Examples: "Apple" - all Apple devices are allowed to sync, but no other devices. "(IBM SyncML Client) (Lotus Traveler WM)" - All Windows Mobile devices (old and new) are allowed to sync, but no other devices. "(Nokia SyncML HTTP Client) (Lotus Traveler Nokia)" - All Nokia devices (old and new) are allowed to sync, but no other devices. "Lotus Traveler * 8.5.2" - Only Windows Mobile and Nokia clients are allowed to sync, but not Apple devices. "(Apple) (Lotus Traveler WM)" - Only Apple and Windows Mobile clients are allowed to sync, but not Nokia devices. "Apple-iPhone/7" - only Apple iphones (not ipods or ipads) using OS 3 are allowed to sync (Windows Mobile and Nokia devices are not allowed either). "Lotus Traveler Android" - Only Android devices are allowed to sync. More information

48 Network topologies Three network topology options to consider... Direct connect Reverse Proxy VPN Configuration 48

Direct Connect SMS Email Notification (optional for

& Windows Mobile Periodic poll for DB changes Notes RPC

devices Internet Domain (untrusted) Data access Notes RPC

2 +) Lotus Domino 8.5.2 with Lotus Notes Traveler 8.5.2.x

49 Direct Connect SMS Notification (optional for Android/WM/Nokia only) Push Request (SSL/443) Android,Nokia & Windows Mobile Periodic poll for DB changes Notes RPC (TCP/1352) App needs to sync Sync Request (SSL/ 443) Apple devices Internet Domain (untrusted) Data access Notes RPC (TCP/ 1352) Lotus Domino mail servers ( ) Lotus Domino with Lotus Notes Traveler x service DMZ Intranet Domain (trusted) Understanding data flow using Lotus Notes Traveler in the DMZ 49

50 Reverse Proxy Reverse Proxy Configuration 50

51 VPN Configuration Virtual Private Network 51

52 Things to know AT&T *Fix* for installing Traveler on AT&T Android 2.2 devices Rollout May 16-23rd on select devices Guidelines for configuration/infrastructure See doc on planning your environment -- w w -10.lotus.com /ldd/dom inow iki.nsf/dx/planning_your_netw ork_topology_lnt8521 Capacity planning - See performance report See capacity planning doc Capacity is based on workload which can vary incredibly between deployments. Look at things like CPU, memory, etc. For initial planning purposes ~ 2K per server is an upper end ballpark Memory and thread sizing confusion with some users (e.g. some Traveler servers still have 100 HTTP active threads when they might really need 300) - See configuring a Traveler server -- w w -10.lotus.com /ldd/dom inow iki.nsf/dx/configuring_lotus_notes_traveler_server_lnt MUST READ - Tuning section of the doc - w w -10.lotus.com /ldd/dom inow iki.nsf/dx/ Tuning_perform ance_of_the_se rver_lnt Traveler Health check command - "tell traveler status" tells you if your HTTP threads are too low or if you are using more devices than you have threads allocated. 52

53 Server Best Practices Install Lotus Traveler on Windows 64-bit server Access to > 2GB virtual memory is critical in larger mobile user populations (> 300) Virtual memory is shared across all Domino processes and can exceed 2GB Reduce memory overhead with notes.ini setting NTS_BUFFER_POOL_SIZE_MB=256 Avoid running multiple applications on the Lotus Traveler server Some applications make server changes which are not compatible with Lotus Traveler (e.g. Disabling HTTP JVM) 53

54 Reference links Lotus Notes Traveler Product Page Lotus Notes Traveler Support site Lotus Notes Traveler Wiki (8.5.2 and beyond) 20Documentation Restricting access by device category Greenhouse (to test-drive Lotus Notes Traveler!) Companion App on itunes Lotus Notes Traveler Performance report Nomination form for beta program! 54

55 THANK YOU!!

IBM Lotus Notes Traveler

IBM Lotus Notes Traveler Marco Paolini Client Technical Professional IBM Collaboration Solutions IBM Disclaimer Information regarding potential future products is intended to outline our general product