Use Microsoft EMS. to Protect your Mobile Data and Mobile Apps. Chris Nackers Nackers Consulting

Size: px

Start display at page:

Download "Use Microsoft EMS. to Protect your Mobile Data and Mobile Apps. Chris Nackers Nackers Consulting"

Winfred Holland
6 years ago
Views:

1 Use Microsoft EMS to Protect your Mobile Data and Mobile Apps Chris Nackers Nackers Consulting Peter Daalmans IT-Concern

2 Peter Daalmans Enterprise Mobility Microsoft MVP Enterprise Mobility Microsoft MVP Sn. Consultant, Author, Blogger Author, Blogger, Geek Boerenkool Ice Cream

3 Agenda App layer protection concepts Azure AD Premium Identity + Application Proxy Intune Conditional Access MAM / EDP Azure Rights Management How to configure

4 App layer protection The concepts

5 Device, Application, Information Mobile Devices MDM MAM MIM Private Company Private Company Private Private Company Company Private Company Private Company Private

6 Azure AD Premium Identity

identity resides in the cloud Identity sync

identity into the cloud Federated identity

authentication on-premises B2B federated

7 Identity: Cloud, Sync or Federated? Cloud identity provides a solution where all identity resides in the cloud Identity sync enables customers to bridge their existing identity into the cloud Federated identity allows customers to retain all authentication on-premises B2B federated identity allows customers to securely share and collaborate with each other

Azure Active Directory Premium Active Directory in the cloud Federation and identity provisioning Centrally managed identities Synchronization Single User Identity

8 Azure Active Directory Premium Active Directory in the cloud Federation and identity provisioning Centrally managed identities Synchronization Single User Identity (SSO) Monitoring and protect access to cloud apps Authentication and Security reports Multi-Factor Authentication (MFA) Empower end Users Self-Service password reset

Integrate on-prem apps with Azure AD End-user portal Access Panel Azure AD authentication capabilities:

Multi-factor authentication Customized login screen Authorization based on user or groups SSO to Office365,

9 Integrate on-prem apps with Azure AD End-user portal Access Panel Azure AD authentication capabilities: Username and password synced from on-prem AD Federated login to on-prem or other federation servers Multi-factor authentication Customized login screen Authorization based on user or groups SSO to Office365, thousands of SaaS apps and all applications integrated with AAD Reports, auditing and security monitoring based on big data and machine learning. Authorization Authentication + MFA Azure Active Directory Reporting & Auditing Application Proxy Security Monitoring Access Panel Portal DMZ Connector Connector Resource Resource Resource Corporate Network

10 Demo Azure Active Directory Premium

11 Microsoft Intune Conditional Access

12 Conditional Access What can we do? Force enrollment before access to Exchange, Lync or SharePoint Force compliance before access to Exchange, Lync or SharePoint Much more investments coming soon (see ref.ms/emsroadmap)

Conditional access for Office 365 2 Attempt email connection 1 4 3 Set device management/

13 Conditional access for Office Attempt connection Set device management/ compliance status If not compliant, push device into quarantine Enrollment/compliance remediation

14 Demo Setting up Conditional Access

15 Microsoft Intune Mobile Application Management

16 Mobile Application Management What can we do? Force compliance before access to the app and data Secure the data within the app Prohibit copy/paste Prohibit screenshots Prohibit save as Force encryption Disable Outlook Sync (MDM-less MAM Only) Secure app by PIN or corporate credentials Secure LOB apps via App Wrapper See for an up to date list of apps:

17 MDM-less MAM Use cases MDM-less MAM: Apps running on devices that are not enrolled in any MDM solution. Apps running on devices that are enrolled in a third party MDM solution

18 Mobile Application Management Maximize mobile productivity and protect corporate resources with Office mobile apps Extend these capabilities to existing line-of-business apps using the Intune app wrapper Personal apps Enable secure viewing of content using the Managed Browser, PDF Viewer, AV Player, and Image Viewer apps

19 Mobile Application Management Copy Paste Save Paste to personal app Save to personal storage Maximize productivity while preventing leakage of company data by restricting actions such as copy/cut/paste/save in your managed app ecosystem

20 Enterprise Data Protection What is EDP? Protects data at rest, and wherever it rests or may roam to Seamless integration into the platform, no mode switching and use any app Corporate versus personal data identifiable wherever it rests on the device Prevents unauthorized apps from accessing business data IT has fully control of keys and data and can remote wipe data on demand Common experience across all Windows devices with cross platform support Available as from Windows 10 Redstone

21 Enterprise data protection PROVISIONING: KEYS AND POLICIES User enrolls with enterprise MDM or domain join 1 MDM or SCCM provisions policy and encryption keys User 2 Policies: Enterprise allowed apps Network policies App restriction policy

22 Demo Configuring MAM

23 Demo Yeah, Copy Paste!

24 Azure Rights Management Protecting the data

25 Azure Rights Management It uses encryption, identity and authorization policies to help secure your files and , and it works across multiple devices.

26 Azure Rights Management Cool Features Protection stays with the file Works both inside and outside the company Easy Audit and monitoring On-prem (RMS Connector) and O365 support

27 Demo Protecting your files

28 So, what fits where? Secure your data and apps in the enterprise

29 What fits where? Identify and authorize user Active Directory Premium User Apply device policies Apply application policies IT Apply content policies Rights Management Enterprise Mobility Suite

30 Share your ideas Share your voice / ideas!

31 Questions

32 MMS!

33 And Then

Use EMS to protect your mobile data and mobile app

Use EMS to protect your mobile data and mobile app Peter Daalmans Senior Consultant, Enterprise Mobility MVP CTGlobal. pds@ctglobalservices.com PETER DAALMANS Enterprise Mobility MVP @ CTGlobal Blog: https://peterdaalmans.com