Update on new Microsoft Cloud Technology

Transcription

1 Update on new Microsoft Cloud Technology

2 Azure Rights Management Services Thomas Collier Technical Pre-Sales

3 D E V I C E S O F F I C E C L O U D S E R V I C E S, S A A S A P P S & O N - P R E M I S E S PCs, tablets, mobile Exchange Online, SharePoint Online & OneDrive for Business Highly regulated Azure 3 rd -Party SaaS Datacenters, file shares Windows Information Protection & BitLocker for Windows 10 Intune MDM & MAM for ios & Android Office 365 DLP Office 365 Advanced Data Governance Azure Azure Rights Information Management Protection Services Microsoft Cloud App Security

4 AZURE RIGHTS MANAGEMENT The perimeter is moving Mobile workforces, BYOD, personal apps, etc. We need data to be born encrypted and to maintain a persistent protection Azure RMS Encryption peering is not practical or scalable There has to be a better way Data privacy is important and is often mandated With GDPR, you want to know what happens with your data

5 WHY AZURE RMS Low entry configuration BYOK Compatibility Office Integration

6 Identify, Classify & Tag Share &Protect Usage Tracking Revoke Access Encryption / RMS Path Identify Encryption Global access tracking Revoke Document Classify Access Control Who / Where / When Tag Permissions Grant / Denied DLP Path Cloud DLP (at rest) EXO DLP (in motion) Enhance on-prem DLP File access tracking Who / Where / When Make private Quarantine

7 AZURE RIGHTS MANAGEMENT Content of the document does not move to Azure RMS, only the policy, authentication and authorization rules are stored. Policy is applied, which contains usage rights and content key is applied to the document Policy Authentication and authorization Rights Management Content key and rights Unprotected content Content is protected by an unique encryption key per tenant. Document can only be decrypted by an authorized user

8 CUSTOM TEMPLATES Rights Scope Target the Users or Groups that can open the protected document. Defines the rights or roles which applies when protecting files. Defines which users can see the template. This creates a departmental template. Language Offline Access Expiration Localize the Name and Description The amount of time you can access the content without a new authentication request Set the date or the amount of days after protection the document is available for access The author of a protected document always has Full Control rights.

9

10 AZURE RIGHTS MANAGEMENT Native Protection Apps with build-in protection. Enlightend Apps Word, Excel, PowerPoint, Text, Images and PDF. 3rd Party apps that use the Azure RMS API Files are fully encrypted and can be accessed within their native app Usage rights and policies are fully enforced. Generically protected Encapsulate genereric files using the.pfile Authentication is needed to unwrap the protected file. Content itself is not protected, only when encapsulated. Usage rights are not enforced (Do-not-print, Do-not-forward, etc)

11 RMS APPLICATION

12 CLOUD READY

13 CLOUD ACCEPTING

14 AD RMS (CLOUD RELUCTANT)

15 sign-on. (optional) Bring your own Key (BYOK) eploy AAD Connect or AD FS for single Customize templates & labels Configure applications and services Deploy RMS Connector (Optional)Deplo

16 DOCUMENT TRACKING Through the RMS Portal Tracking includes: Dashboard with statistics on open, rejected and activity. Chronologic list of all actions on your documents Timeline of document usage. Provides a geographic mapview of access attempts Notifications Premium Feature

17 REVOCATION Expired Content Manually Revocation Instant Revocation

18 APPLICATION SUPPORT Exchange Online Exchange OnPremise SharePoint Online SharePoint OnPremise File Server using File Classification

19 DEMO Admin Console End-User Experience Tracking & Revoking Connectors & Office 365

20 Feature RMS for Office 365 Azure Information Protection P1 Azure Information Protection P2 Manual document classification and consumption of classified documents Yes Yes Automated data classification and administrative support for automated rule sets Hold Your Own Key (HYOK) that spans Azure RMS and Active Directory RMS for highly regulated scenarios Protection for Microsoft Exchange Online, Microsoft SharePoint Online, and Microsoft OneDrive for Business content Yes Yes Yes Bring Your Own Key (BYOK) for customer-managed key provisioning life cycle2 Yes Yes Yes Custom templates, including departmental templates Yes Yes Yes Protection for on-premises Exchange and SharePoint content via Rights Management Services (RMS) connector Yes Yes Yes RMS software developer kit for all platforms: Windows, Windows Mobile, ios, Mac OSX, and Android Yes Yes Yes RMS connector with on-premises Windows Server file shares by using the File Classification Infrastructure (FCI) connector Yes Yes Document tracking and revocation Yes Yes Protection for non-microsoft Office file formats, including PTXT, PJPG, and PFILE (generic protection) Yes Yes Yes RMS content consumption by using work or school accounts from RMS policyaware apps and services Yes Yes Yes RMS content creation by using work or school accounts Yes Yes Yes Office 365 Message Encryption (OME) Yes Yes Yes Administrative control Yes Yes Yes AZURE RIGHTS MANAGEMENT Yes Yes

21 RESOURCES Yammer: aka.ms/aipyammer FastTrack fasttrack.microsoft.com

22

23 Microsoft Teams will replace Skype for Business Online Skype for Business OnPremise will be released AADSync Passthrough Authentication is General Available (GA) Office 365 adoption content pack in Power BI First Release = Targeted Release ATP: Expanded to SharePoint (Also Teams, OneDrive & Groups) Microservices Launched Whiteboard in Preview Business Center is GA Microsoft Connections Outlook Customer Manager Microsoft Listings Microsoft Bookings Microsoft Invoicing MileIQ Microsoft To-Do is GA OFFICE 365 UPDATES