Securing Mobile Devices - Corporate and Private
Good Technology has developed an optimum security model, with five key elements:
1. Authentication.
Good provides you with the administration tools necessary to define strong authentication policies, enforced consistently across platforms. You have the flexibility to enforce passwords at the device level, for corporate-issued devices, or at the Good application level, for personally owned devices. Also, you can define policies to wipe the Good application and all its data (and on some device platforms, wipe the entire device), for an employee’s failure to provide the correct password after a set number of failed attempts or if a device is lost or stolen. Strong policies let you disable sequential numbers in passwords, require special characters, and more. When you deploy strong over-the-air (OTA) policies, only employees that are authenticated can connect to the Good Network Operations Center (NOC).
2. Data Protection.
With Good for Enterprise, you can be confident your business data is protected even when your data shares the same device with any number of consumer applications. It’s possible because of the Good enterprise container, an encrypted cocoon that securely houses enterprise data and applications on the device, which encrypts all data with strong AES 192-bit encryption. The Good solution also encrypts any data that’s in transit between the device and servers behind your firewall. So the data protection extends all the way from the firewall to the device — irrespective of whether the device is company-owned or employee-owned.
3. Enforcing Access Controls.
The Good platform lets administrators restrict access to Good servers, based on a particular device OS and/or Good client version number. Additionally, Good provides the capacity to control access to networks from the device, including Bluetooth. On the server side, IT can distribute management tasks across a hierarchy of administrators using role-based administration that offers a set of roles—with varying permissions—for administering the Good server and employee devices. Routine tasks, such as loading software, can be delegated to a wider group of administrators across multiple locations. More restricted tasks, such as setting global policies or remotely erasing a handheld when lost or stolen, can be limited to a smaller group.
4. Securing Network Access.
Good servers establish an outbound connection to the enterprise firewall, so there’s no need to open inbound ports and expose the enterprise network to attack. In addition, network traffic between the device and the server is always encrypted with AES 192-bit encryption. The NOC only services encrypted packets, so it provides the additional functionality of authenticating devices to the network, granting access only to devices that have been provisioned to access their respective servers and services—thus preventing rogue devices from gaining access to the network.
5. Securing the Platform.
Good provides strong protections on each platform, with policy controls that include strong encryption of data (OTA and at rest), full device wipe, application white-listing/blacklisting, preventing applications from being installed or registry settings from being changed, and detecting jailbroken or rooted devices. On some device platforms, Good can offer granular Bluetooth profile management, disabling transfers and LAN access through the Bluetooth network, while allowing devices (such as headsets) to pair with the device. On iOS devices, Good provides policies to prevent access to the App Store, YouTube, the Safari browser and more, if needed by your business.
