In this video, I'd like to chat with you
about the benefits of a mobile device management,
or MDM policy for a network.
So MDM is an acronym for mobile device management.
Because stuff that's not bolted down can move around, like,
a wireless laptop.
And then, like everything else, our smartphones
and other smart devices that are being
used, whether they're in the office being used
through the wireless in the office
or they're connecting from their homes, or other locations,
such as a hotel.
And as part of any good mobile device management system, WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
And as part of any good mobile device management system,
we are going to have an ability to onboard.
Now, onboard is just simply introducing
or bringing on a mobile device into our mobile device
management system.
And that leads to something important called inventory.
So we know exactly, or we're expecting
what is going to connect and what's allowed
to connect to our network.
And after a device has been onboarded,
it now becomes part of the mobile device management
inventory.
So it's part of the database, part
of the information about what devices are expected
to connect to the network.
And that connection could be local, on-prem, WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
And that connection could be local, on-prem,
or it could be connecting with a VPN
from a remote network such as the internet.
And with a good mobile device management program or system,
here are a few of the benefits.
One would be application protection.
So if a mobile device is brought in by the user,
the user might have to agree to have their device become part
of the mobile device management system
so that they can have some of these benefits,
like, application protection.
Or if the device is issued by the company to the user,
then the company has a better stance
because it's their device in saying
this is what's going to happen. WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
this is what's going to happen.
And as far as application protection,
we can specify through our mobile device management
system what applications are allowed to run on that device.
And that way we can lock applications down
to a specific list and only those applications
can run on that mobile device.
Another benefit of a good MDM is data protection.
We can enforce through a policy that there's
encryption involved, and that when
data is being stored, especially if this is Bob here,
and Bob has VPNed in and he's accessing data
and it's stored on his mobile device, WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
and it's stored on his mobile device,
we can specify through policy on that device
that the location where that's being stored
is being encrypted.
Another benefit of a good MDM system would be malware--
and I'll include in that virus--
protection that can be enforced via the policy.
Another benefit is identity management, both the identity
of that mobile device based on certain characteristics
as it connects, including the identity of the user using it.
Perhaps part of our policy is multifactor authentication.
And with a smart device, the user
can provide two different factors, such as their password WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
can provide two different factors, such as their password
and also a picture of their face,
which is something they have.
We'll take a closer look at multifactor authentication
in a separate video.
And the great news here is that we
can enforce that via our mobile device management system.
Another great option is provisioning.
If you've ever set up a new device,
there's a lot of things that can be gone through,
a lot of choices that have to be made.
And if we have a mobile device management system,
the provisioning based on our security policies
can be automated and routine.
And that way we're not forgetting
this step or that step.
And we're locking down the more risky apps WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
And we're locking down the more risky apps
or the risky services.
And we're forcing consistently the options such as encryption
for the data protection.
And one of the benefits of having a system
is that we can have templates, which
is a generic concept for doing something the same way
every single time.
So if we have a platform service policy that
says every iPhone gets treated this way,
every Android device gets treated that way,
every tablet gets treated the other way,
by using the same templates, the same config
and having the same consistent policy across the same type WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
and having the same consistent policy across the same type
of devices, that's going to help not only our security,
but it's also going to help in the support of those devices
because they're all acting and behaving the same way.
And I did a Google search for MDM platform comparison.
And there's lots of hits that came up,
including a lot of ads.
Here's one from TrustRadius that I thought was interesting.
So if we scroll down to products,
here's a list of vendors that do mobile device management.
So as we scroll down, here's a very popular one,
Microsoft's Intune, in conjunction with System Center
Configuration Manager.
And as we scroll down, here's AirWatch by VMware. WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
And as we scroll down, here's AirWatch by VMware.
There's a solution from IBM.
There's a solution from Cisco as part of their Meraki suite,
called the Meraki Systems Manager.
And the list goes on.
In this video, we took a look at a few
of the benefits of a mobile device management system,
including on these smart devices that
have the ability to use a camera to do multifactor
authentication.
And you know what?
In the next video, let's take a little bit more
time and confirm that we understand
what that is, what is multifactor authentication,
and how we can leverage it to improve
the security of our endpoints in our networks. WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
the security of our endpoints in our networks.
So I'll see you in that next video in just a moment.
Meanwhile, I hope this has been informative for you.
And I'd like to thank you for viewing.