Roambi Deployment and Security

Download Report

Transcript Roambi Deployment and Security

Triple-Layered
Security
INHERITED SECURITY
ROAMBI SECURITY
DEVICE SECURITY
User/Group
Management
Single Sign On
Object Level Security
Row Level Security
File Management
App Lockout
App Block & Wipe
App PIN
File Recall
iOS 4 Data Protection
Hardware Encryption
Device Provisioning
VPN
Device Remote Wipe
ROAMBI APP PIN
➡
➡
➡
➡
➡
Optional PIN for Roambi App
Prompts users to create PIN if option is
enabled
Two Deployment Options:
Always - whenever app is opened or
brought to foreground
Offline Only—whenever app is used
without data connection or in airplane
mode
ROAMBI ANALYTIC
RECALL
USING ANALYTIC
RECALL
➡Use to remove or replace an RBI
➡Prevents download of RBI
➡Removes existing RBI from devices
➡Prevent users from viewing recalled
RBI
➡Removes RBI from Portal list
USING APP LOCKOUT
➡Initial defense for misplaced device
➡Prevents opening of Roambi app
➡No data is wiped from device
➡Pre-cursor to Block & Wipe
➡Initiated on the Control Panel
johndeemacbook.local
USING BLOCK & WIPE
➡Blocks app when launch is attempted
➡Targeted Wipe of Roambi content
➡Targeted Wipe of Account Information
➡Roambi app remains
➡Does
not wipe entire device
johndeemacbook.local
Deployment Options
DEPLOYMENT OPTIONS: ES
IN THE DMZ
Roambi can leverage both server and client side certificates. By using
both server and client certificates you can guarantee the highest level of
security for your corporate network and data.
ROAMBI SERVER
BI SYSTEM
ROAMBI VIEWS
Ports would be opened on the firewall
to allow phone users to access
Roambi and to allow Roambi to
access your BI System
Are you a
trusted site?
ROAMBI PUBLISHER
Inner
Firewall
Outer
Firewall
DEPLOYMENT OPTIONS:
REVERSE PROXY
ROAMBI SERVER
ROAMBI VIEWS
BI SYSTEM
REVERSE
PROXY
Are you a
trusted site?
Here only a web
server exists in the
DMZ which acts as a
proxy to Roambi.
ROAMBI PUBLISHER
Inner
Firewall
Outer
Firewall
DEPLOYMENT OPTIONS: VPN
ROAMBI SERVER
ROAMBI VIEWS
BI SYSTEM
Users utilize the VPN client on the
iPhone to access Roambi. Can use
VPN on demand or user enabled
VPN.
ROAMBI PUBLISHER
Outer
Firewall
TWO-WAY SSL AUTHENTICATION
Roambi can leverage both server and client side certificates.
By using both server and client certificates you can guarantee
the highest level of security for your corporate network and
data.
BI SYSTEM
ROAMBI VIEWS
Are you a
trusted site?
ROAMBI PUBLISHER
Outer
Firewall