Supporting any device
How to retain control in a mobile world
Dr Richard Hayton
Chief Architect
Mobile Platforms Group
Citrix Systems Inc.

Navigating the journey
• What is your problem?
• Understand your needs
• Technical Approaches
• MDM, MAM, Virtualization
• Securing Mobility
• 5 key areas
• Future Considerations

Data
Apps
Desktops Collaboration
Personal
Mobile users need access
to business-grade apps
and company data from
any device.
IT wants a secure,
scalable, manageable
solution that balances
user access with privacy.

Define the problem
Freedom for users to access all apps and data
Which apps matter from any of their devices
today?
What about tomorrow?
Email? Cloud? Legacy? What data do they need?
Is it sensitive?
Do they need it offline?
Is your focus on Phones,
Tablets or Laptops?
Will users expect all
three?
Are they company or
personal devices?
How much control can
you have – and how
much do you want?

Technical Options
Receiver
WorxWeb
WorxMail AnyProject
Virtual App Access
- Small corporate footprint
- Highly secure / Online only
Application Containers (MAM)
- Focus on business apps
- Enables personal device use
Device Management (MDM)
- Flexible control and
configuration
- Challenging for BYOD

Virtual App Access

Virtual App Access
Ubiquitous and (with effort) very mobile friendly
iPhone
iPad
Android
Win8
Phone
Win Laptop
Linux PC
Thin Client
Web
Browser
Blackberry
Mac
Laptop
Windows Desktops and Apps
Mobile
Enabled
Built for
Mobile

Mobile Application
Management
(App Containers)

Mobile Application Management (containers)
• “Wraps” an application
• Adds additional features
• Typically via a SDK or ‘Wrapping’ tool
• Examples:
• MicroVPN – access to corporate internet
• Encrypted Storage
• Enterprise Authentication
• Policy to control app execution
• Communications with other apps
Encrypted
Storage
Micro
VPN
Enterprise
Auth
Policy
Inter-App
Comms

Cross container interaction
• Managed apps usually work
together
• Share data
• Share VPN
• Share enterprise login
• Interaction with external apps is
usually restricted
• Cut/paste
• Open In
• Use of camera / peripherals
Encrypted
Storage
Micro
VPN
Enterprise
Auth
Policy
Inter-App
Comms
Encrypted
Storage
Micro
VPN
Enterprise
Auth
Policy
Inter-App
Comms
Encrypted
Storage
Micro
VPN
Enterprise
Auth
Policy
Inter-App
Comms

Mobile Device Management
MDM

Mobile Device Management (MDM)
What does it let you do…?
• Ability to push applications & remove them later
ᵒ Gives a smoother user experience
ᵒ Reduces support costs
• Ability to control device settings
ᵒ Eg. configure wifi, require passcode
ᵒ Maintains compliance. Reduces support.
• Ability to monitor the device*
ᵒ Determine which apps are installed
ᵒ Look for jailbreaks / rootkits / policy breaches
• Ability to wipe the device
ᵒ Great if the device is lost / stolen
ᵒ Dangerous in the wrong hands
Great for
corporate
devices
More
questionable
for BYOD ?

Securing Mobile Devices
And staying sane
5 Top Tips

Manage only what matters
…or you’ll die trying
1

Think “user experience first”
… or users will work around the system
2

Virtualize and Containerize
…to keep data in the datacenter and securely mobilize
3

Automate desired outcomes
…default mobile behaviors should be the ones most needed
4

19
Provisioning
A Device
For IT
Link authorized users to
Active Directory
Automatically assigns
new user to ‘role’ (e.g.
sales)
Auto-configure device—
Email, Wifi, PIN, apps
Ensure compliance

20
Provisioning
A Device
For the end user
Enrolls device / signs up
Key apps are pushed & device is
configured
Given unified app store with easy
self-service
Enterprise cloud storage
immediately available

21
User Status
Change
Account disabled
App accounts & data access
instantly wiped
Device wiped / settings reset

Protect sensitive data above all else
… it’s too late once it escapes
5

Data policy – an example
Data Location Device Type
All grades
of devices
BYO Devices
Corporate
Devices
Physically
Secured
Restricted On Premise Virtualized Access Virtualized Access Offline Mobile Access
Confidential On Premise Virtualized Access Online Mobile Access Offline Mobile Access
Low Value Secure Cloud Offline Mobile Access Offline Mobile Access Offline Mobile Access
Note: Governments have their own data classification schemes that greatly expand on this simple model

Per-App
Policy Controls
User authorization required
Allow local storage
Offline access allowed
Restrict document sharing
Enable internet access
Validate device characteristics
Configure timeouts

Future Considerations

EMM Enterprise Mobility Management
Productivity and
Collaboration
Content Management
App Management
Device Management
EMM is much more than MDM

Typical customer roadmap…
Step 1: Secure Apps and Data on Step 3: Mobilize Your Business
• Mobilize business processes
• Task-specific, contextually relevant
• Buy, build, integrate & secure
• Virtualized, web, or native
• Rapid time-to-market
all Devices
Step 2: Workflow-driven Mobile
Productivity
• Mail
• Browser
• Docs
• Office
• Collaboration
• Tasks, Notes, Chat…

Typical customer roadmap…
Step 1: Secure Apps and Data on Step 3: Mobilize Your Business
• Mobilize business processes
• Task-specific, contextually relevant
• Easy to buy, build, integrate & secure
• Virtualized, web, or native
• Rapid time-to-market
all Devices
Step 2: Workflow-driven Mobile
Productivity
• Mail
• Browser
• Docs
• Office
• Collaboration
• Tasks, Notes, Chat…

Work better. Live better.
www.citrix.com/byod
www.citrix.com/xenmobile