The Enterprise Mobility Forum

Viewing post 1 to 13 (13 total posts)

Tools to sandbox corporate data on the individually liable device (13 posts)

← Group Discussion Discussion Directory

Mike Yost said 1 year, 8 months ago:

Are there any? How are people approaching this problem? Is anyone happy with their solution?

#
Philippe Winthrop said 1 year, 8 months ago:

You mean like Good?

#
MobileAdmin said 1 year, 8 months ago:

The two main ones .. (we have deployed both)

Good Technology – puts corporate content in a secure container so email, calendar, contacts are isolated from other device data. Allows separation of policy to the Good App and device level for security / management.

Blackberry Balance – Provides policy which tags corporate data and apps and what users can do with the data (forward, delete etc). Mostly nice when employees terminate.

We have found that while Good does provide one part it also impacts the functionality of the devices native features. You also have the issue of users wanting to use device level apps (natively or downloaded) which you have no control over.

#
Matt Carrier said 1 year, 8 months ago:

Don’t forget about NitroDesk TouchDown. It’s an encrypted sandbox for Microsoft Exchange data on the Android platform. It can be bought stand alone and works natively with MS Exchange (doesn’t require the middleware sync environment of GOOD), or can be centrally configured,deployed, controlled via a MDM solution.

http://www.nitrodesk.com/TouchDown.aspx
Regards,
Matt

#
Philippe Winthrop said 1 year, 8 months ago:

NitroDesk does a great job for email. Mike….is this what you are looking for, or are you looking to sandbox beyond email? Also, out of curiosity….why sandbox, when you can use Mobile Application Management tools?

#
Jonathan Foulkes said 1 year, 7 months ago:

Additionally there is a secure container app / MEAP from Rover Apps that enables securing access to company data and systems.
The latest v2 release also features secured browsing of intranet resources, along with the existing MEAP capabilities, making it a good selection for people looking to start with something simple (like intranet app access) and grow into more sophisticated apps.

Philippe, one reason people are interested in container apps is that there are scenarios where it is either the simplest choice, or where it is the only choice due to span-of-control issues. If the device I want to provision belongs to the employee of a third party contract firm, then I might not be able to put it under MDM.

But even for organizations that can do MDM, it provides additional layers of security and information management as I outlined in this blog post:
http://roverapps.com/blog/2011/10/9/what-about-device-management.html

#
Matt Carrier said 1 year, 7 months ago:

Another one I’ve come across lately is Moxier Mail by Emtrace. Big presence in Asia and comes in the ROM of many Android devices in Asia. It’s appears almost identical to Nitrodesk for Android, but they also have an IOS client. Again different than GOOD as there isn’t that middleware sync component. Each client works directly with Micorsoft EAS protocol.

http://itunes.apple.com/us/app/moxier-mail/id438378970?mt=8

https://market.android.com/details?id=com.emtrace.hermes&feature=search_result

#
Philippe Winthrop said 1 year, 7 months ago:

There’s also an emerging trend towards dual persona devices which takes the container model to a completely new level….it’s more mobile virtualization than (traditional) containers.

#
Leuk Andersen said 1 year, 6 months ago:

Pinecone from Little Red Wagon (LRW) is also interesting. RIM/Good like architecture with relay technology except you host this yourself. They were early to market with PDF markup, document creation and management features in their container along with solid email, calendar, contacts and a secure browsing solution.
http://www.lrwtechnologies.com/
So, embrace the OS with MDM or deploy a container…it’s a blue pill, red pill conversation. (Perhaps a green pill for virtualization)

#
Trey Neal said 1 year, 6 months ago:

We are looking to sandbox documents in IL devices – for instance, we have a large Sharepoint document library that our users want to download from so that they can read offline, primarily on iPads. We don’t want those to exist in an environment we don’t control. We’ve deployed GOOD for email (not a fan I might add) but it lacks the control of documents. Are there tools that address this need.

#
Philippe Winthrop said 1 year, 6 months ago:

Trey – I just sent you a connection request. Let’s talk off line about your needs and see how I might be able to help.

Thanks!

#
Randall Cameron said 1 year, 4 months ago:

Trey – I have been working with a few customers recently on this very issue. We are currently trailing a solution that might suit your needs specifically built for iPad and SharePoint. Please contact me if you are interested.

A quick blurb

The Mobile SharePoint Software has two components: The Mobile SharePoint Server Software and the Mobile SharePoint Client. The Mobile SharePoint Server Software resides on the Web Front Ends in the corporate SharePoint farm. Our software enables the mobile device user to access the content in the corporate SharePoint Farm including:
 View and edit List Content
 View and edit Document Libraries
 View and edit Calendars
 Check Content in and out
 SharePoint Work Flows
 Cache SharePoint Data on the mobile device
 Integrates with corporate MDM solution including Pinecone.
 Enables mobile functionality similar to desktop experience
 Touch Friendly

Security update December 2011
Added the ability to limit which data gets delivered to the device. Turn off Sites or Lists within your SharePoint site to ensure sensitive content you wouldn’t want to leave your internal network never will.
Geo Fence data. Define a geographic “Box” for the content on the site. The App and Server product will automatically trim the data based on your geographic area you are in. It includes “Inclusive” and “Exclusive” areas.
Example: “I only want this data to exist within Texas” and if you exit the area it will delete it (Or if you are outside the Area trying to access the site it will never be downloaded). Or – “We don’t want this data to ever exist in China” and it would delete the data if you entered that area.

#
Adi Ruppin said 1 year, 4 months ago:

I’m new to this forum and this is the first discussion I’ve seen…
My company, WatchDox, actually provides a solution that secures corporate documents on any mobile device (or PC). It allows the enterprise to restrict users from copying, printing, forwarding or otherwise removing documents from their device, tracks the documents at all times, and allows their remote destruction.

The interesting differentiation here is that the approach is document-centric. This means that the company doesn’t have to manage the device, and in fact the device may even belong to a third party whose devices will never be managed by your enterprise. Still, you will be able to control, track and destroy documents you have shared and are stored on the third party devices, since each document is “individually wrapped”.
Geo-fencing, connectivity and synchronization with SharePoint, and other capabilities mentioned on this thread are also options this product can offer.

If this is what you were looking for, please contact me or check out http://www.watchdox.com.

#