顯示具有 Cloud Security 標籤的文章。 顯示所有文章
顯示具有 Cloud Security 標籤的文章。 顯示所有文章

2012年12月31日 星期一

Mobile Device Management (MDM) (4) - Core Function Features (Demo with AirWatch Cloud SaaS Version)

AirWatch can be offered as Cloud/SaaS and In-Premises. Let's play with it cloud provisioning model.

IT Administration log in the web based administration page on cloud. Air Watch has several datacentre globally. An new user account namely "amicewong" is setup. Adminstrator could choose to alert "amicewong" by SMS or by email. Let's choose SMS.
The end-user (amicewong) receive an SMS with an URL. End-user trigger the link. Browser on the smartphone (a Samsung Galaxy SIII / Android in this case) connects to the specified link. First time setup and phone enrollment start.

However, the enrollment process seems never end. It is supposed some issue happen.

As the administrator, I try to chat with AirWatch online support (to test their support response at the same time :)). I was told that AirWatch client app is required to be installed before enrollment.
On the "Play Store" of Google, the AirWatch MDM Agent is found, download and installed. Then assigned URL and pin from SMS is input for enrollment.
Installation and Enrollment is done.
Once the phone is encrollment, administrator can track the phone status including, model, version, compliance (rooted or not), location, application installed on the phone, etc.

Operation logs on the phone.

Administrator could keep track of existing application on the phone, as well as assigning application that need to be installed on each phone. Administrator can  also blocked and uninstalled unauthorized apps on the enrolled phones.



 Lets' say the enterprise require end-user to install a "push up" app.


Once assigned, end-user would receive an alert on the phone. End-user simply click and download from the Play Store. Installation starts.
 AirWatch has also development application, like Secure Locker, Secure Browser. The Secure Browser allow enterprise to keep track and control of the website that end user (could) visit on the smart phone.
(Secure Browser are sold with additional cost)
Administrator can also distribute necessary documents to enrolled phone. For confidential document, administrator can configure as "view online" only, without having the confidential document to be stored on the phone.


2012年7月16日 星期一

Dimension Data: Security questions you should ask your cloud provider

Security questions that you should ask your cloud provider
In order to evaluate the security approach of a cloud provider, enterprises should ask the following questions of their cloud providers:

Network security:
• Do you provide dedicated physical or virtual LANs to your clients?
• How does your data centre architecture contribute to client security?
• Are clients able to define their own authorisation and access control lists?
• How can clients ensure that their networks are secure?

Secure user access:
• How do you provide secure access (SSL-based VPNs) to your clients?
• How do you provide account-based security?
• Do you support role-based access controls?
• Do you support the addition and removal of ACL firewall rules directly in addition to host-level security?
• How do you monitor and report on usage and activities for audit purposes?

Compliance:
• What compliance certifications does your company hold, and how often do you undertake a compliance audit?
• Do you permit clients to audit your security controls?
• How do you address requests for location-specific storage to abide by data sovereignty requirements?
• Can a client’s data be prevented from being moved to a non-compliant location?

Virtual machine security:
• What protocols do you use to secure applications running on a virtual machine?
• How do you secure virtual machines in your cloud?
• How do you isolate one or a logical group of virtual machines from one other?
• Do clients have visibility into their virtual machines and servers running in their cloud and, if so, what monitoring tools do you provide?

Dimension Data Cloud Security : Develope a Secure Cloud Approach

Taking a layered approach to securing the cloud

The solution lies in taking a layered or ‘defense in depth’ approach to enterpriseclass security. An effective hosted cloud service involves much more than migrating sensitive data into an environment, simply
wrapping a virtual perimeter around it and calling it secure. Unfortunately, this is precisely what many public cloud offerings consider ‘security’. Businesses should give thought to how to best secure each layer of the cloud environment, including the infrastructure, operating system, application and network layers. They need an integrated approach that considers networking and security together, in order to provide security for
the overall functionality of the application and data to be migrated to the cloud.


The whitepaper is to be downloadable at http://www.dimensiondata.com/