26
Is Your Enterprise Ready to Secure the Multitude of New Mobile Devices http://twitter.com/SAPMobile http://www.facebook.com/SAPMobile Watch webcast replay

Is Your Enterprise Ready to Scale Mobile Device Security?

  • View
    619

  • Download
    2

Embed Size (px)

DESCRIPTION

Forward-looking companies are actively harnessing the power and capabilities of mobile devices and apps to enable a productive and empowered workforce. The average business staffer carries 2 or 3 mobile devices, downloads over 40 apps, and upgrades every 6-18 months. This diversity and rapid pace of change presents significant security and compliance challenges for enterprises and IT decision makers. Find out why a highly scalable enterprise mobility management (EMM) solution not only saves on capital and manpower costs but is ultimately critical to your mobile strategy success. A recent study by a leading third-party lab compared how SAP Afaria competitor MDM solutions responded to concurrency, policy refresh rates, logging, app downloads, admin actions, and overall software security through penetration testing. Results from this study demonstrated that customers using SAP Afaria on Amazon Web Services (AWS) are able to rapidly provision and ultimately support tens of thousands or more devices per server instance, saving both time and costs over competitive offerings. Key Topics of this Webcast include: Uncovering potential pitfalls of enterprise mobile ecosystem build-outs Optimizing an EMM solution that scales to meet your mobile needs Applying best practices to establish a scalable cloud or on-premise foundation for your mobile security strategy

Citation preview

Page 1: Is Your Enterprise Ready to Scale Mobile Device Security?

Is Your Enterprise Ready to Secure the Multitude

of New Mobile Devices

http://twitter.com/SAPMobile

http://www.facebook.com/SAPMobile

Watch webcast replay

Page 2: Is Your Enterprise Ready to Scale Mobile Device Security?

© 2012 SAP AG. All rights reserved. 1

The information in this presentation is confidential and proprietary to SAP and may not be disclosed without

the permission of SAP. This presentation is not subject to your license agreement or any other service or

subscription agreement with SAP. SAP has no obligation to pursue any course of business outlined in this

document or any related presentation, or to develop or release any functionality mentioned therein. This

document, or any related presentation and SAP's strategy and possible future developments, products and

or platforms directions and functionality are all subject to change and may be changed by SAP at any time

for any reason without notice. The information in this document is not a commitment, promise or legal

obligation to deliver any material, code or functionality. This document is provided without a warranty of any

kind, either express or implied, including but not limited to, the implied warranties of merchantability, fitness

for a particular purpose, or non-infringement. This document is for informational purposes and may not be

incorporated into a contract. SAP assumes no responsibility for errors or omissions in this document, except

if such damages were caused by SAP´s willful misconduct or gross negligence.

All forward-looking statements are subject to various risks and uncertainties that could cause actual results

to differ materially from expectations. Readers are cautioned not to place undue reliance on these forward-

looking statements, which speak only as of their dates, and they should not be relied upon in making

purchasing decisions.

Legal disclaimer

Page 3: Is Your Enterprise Ready to Scale Mobile Device Security?

© 2012 SAP AG. All rights reserved. 2

Today’s Presenters

Nisha Sharma

Senior Manager, Accenture

Rob Smithers

CEO Miercom

Bryan Whitmarsh

Mobile Solution Manager, SAP

Page 4: Is Your Enterprise Ready to Scale Mobile Device Security?

© 2012 SAP AG. All rights reserved. 3

Today’s Agenda

Introductions

Why Scalability Matters? $$$!

# Devices

# Apps

TCO

Accenture – Scalability Practiced

Setting up a Scalability Benchmark

Questions

Page 5: Is Your Enterprise Ready to Scale Mobile Device Security?

© 2012 SAP AG. All rights reserved. 4

Changes in mobile are not happening in isolation

Mobile

Cloud Services

“Consumerization of

IT”

Big Data

More potential value,

requires high performance

analytics

The Challenge:

Deliver business value while maintaining Security, Cost Management,

Visibility and Agility Cost Effectively

Page 6: Is Your Enterprise Ready to Scale Mobile Device Security?

© 2012 SAP AG. All rights reserved. 5

Think about the whole picture

Enterprise mobility management

What is EMM?

• Growing trends like BYOD and the

consumerization of IT have changed the

way companies look at securing and

enabling mobile devices, apps and

content.

• Instead of a simple Mobile Device

Management companies look to a

comprehensive strategy (MDM, MAM,

MCM)

• EMM solutions allow enterprises to

holistically manage diverse mobility needs

to simplify business processes, and make

employees more productive.

Mobile Device

Management

(MDM) SAP Afaria

Enterprise App

Store SAP Enterprise Store

Mobile

Application

Management

(MAM) SAP Afaria

Mobile Content

Management

(MCM) SAP Documents

Page 7: Is Your Enterprise Ready to Scale Mobile Device Security?

© 2012 SAP AG. All rights reserved. 6

Cloud, Big Data and Mobility Driving Nexus of Forces

Page 8: Is Your Enterprise Ready to Scale Mobile Device Security?

© 2012 SAP AG. All rights reserved. 7

Billions of Apps

Page 9: Is Your Enterprise Ready to Scale Mobile Device Security?

© 2012 SAP AG. All rights reserved. 8

SAP Mobile Market Framework

Mobile Software Mobile Services

Managed Mobility Services

(MMS)

Messaging Infrastructure

Operator

Services

Enterprise

Services

Mobile Application Platform

Mobile Application Development

Platform (MADP), aka MEAP mCommerce Platform

Mobile Management / EMM

Mobile Enterprise Management

(MEM)

Mobile Device

Management

(MDM)

Mobile Application

Management

(MAM)

Mobile Content

Management

Mobile Enterprise

App Store

Mobile Portal /

Intranet

Mobile Security

Core Market

Adjacent Market

Related Market

Mobile Applications

Enterprise Apps

Consumer Apps M2M / IoT

Apps

mCommerce

Apps

Mobile

Analytic

Apps

Page 10: Is Your Enterprise Ready to Scale Mobile Device Security?

© 2012 SAP AG. All rights reserved. 9

Performance and Scalability Mandates

Scalability is about the ability to increase

the number of the end points and its effect

on the server environment.

• Performance is how well something

does something

• Scalability is the ability to extend that

performance out in a cost effective

manner

Page 11: Is Your Enterprise Ready to Scale Mobile Device Security?

© 2012 SAP AG. All rights reserved. 10

Mobile TCO is all about scalability

Mobility is an operating cost. An EMM solution that effectively scales will save a

company money over time by minimizing cost per end point.

Administration Costs

Overall knowledge,

training, headcount,

physical server location

Power Cost

Amount of nodes are

reduced per rack

with a scalable

solution

Capital Costs

Page 12: Is Your Enterprise Ready to Scale Mobile Device Security?

© 2012 SAP AG. All rights reserved. 11

SAP Afaria – Perfect Scenario

Graph “A” indicates

a gradual cost

incline, based on

adding end points

(users) to the

environment

Graph “B” depicts a

perfect scenario,

where cost starts to

drop as users are

increased

Graph “C” shows

increased costs,

as users increase.

Many solutions fall

within this

scenario.

Page 13: Is Your Enterprise Ready to Scale Mobile Device Security?

© 2012 SAP AG. All rights reserved. 12

Scalability Questions and Concerns

Do you have the capacity to scale?

What is your database I/O ability to handle input/output?

What is the impact on performance, when you add new users?

Is the outcome that users experience a slow app and therefore don’t use it?

What different models does your app support?

Does your app support multi databases?

Does your solution provide standard clustering models (database clustering)?

Does your solution offer analytics?

Page 14: Is Your Enterprise Ready to Scale Mobile Device Security?

MDM Scalability and

Performance Concerns and

Considerations January 30, 2013

Page 15: Is Your Enterprise Ready to Scale Mobile Device Security?

© 2012 SAP AG. All rights reserved. 14

We are all living in a multi-OS environment

Rapid advance

of mobile OS

Bring Your

Own Device

New deployment

options

Mobile device and content

security critical for the

enterprise and consumers

Average Employee owns

two mobile devices

Consumer driven

employees demand similar

mobile enterprise

experience

MSP SaaS Mobility addresses

complexity, saves costs

Consumer and

enterprise applications

Popularity of consumer-like

self-service portals

Rapid diversity leads to

fragmentation

Tablets and smart

phones are becoming

primary computing tools

Average household has

five connected devices

37.2% of the world total workforce will be mobile by 2015*

70% of organizations will introduce a BYOD policy**

Sources: *IDC / **VDC Research

Page 16: Is Your Enterprise Ready to Scale Mobile Device Security?

© 2012 SAP AG. All rights reserved. 15

When rolling out an MDM solution, the primary areas of concern related to

performance and scalability are centered around:

• Enrollment

• Daily check-ins (inventory and payload delivery)

• Policy/configuration updates

• App downloads/updates

• Administration

• Self-service

• Backend scripts

How will all of these components perform when the system (i.e. database)

is loaded with all of the expected devices and data?

Areas of Concern

Copyright © 2013 Accenture. All

rights reserved.

15

Page 17: Is Your Enterprise Ready to Scale Mobile Device Security?

© 2012 SAP AG. All rights reserved. 16

Consider the following during your own mobile deployment:

• Implement a distributed system architecture with redundant components

• For large deployments, use physical databases

• Use a phased deployment approach

• Distribute load where possible

• Use content delivery networks and/or dynamic network bandwidth

• Conduct tests

o Performance test (system and device)

o Failover test

Considerations checklist

Copyright © 2013 Accenture. All

rights reserved.

16

Page 18: Is Your Enterprise Ready to Scale Mobile Device Security?

© 2012 SAP AG. All rights reserved. 17

• Miercom Testing Programs started in 1988

• Labs located in East – Princeton, NJ, West – San Mateo, CA, also Eastern

Pacific Partnering Labs

• Trusted testing authority for eWeek, Network World, BCR/No Jitter,

xChange, TMC Internet Telephony, Communications News and other

publications

• 25 Years of Product Testing

Page 19: Is Your Enterprise Ready to Scale Mobile Device Security?

© 2012 SAP AG. All rights reserved. 18

Setting a Mobility Test Baseline

• Cloud solution

• Supports on-premise solution, hosted SaaS, or managed mobility models

• Data Partitioning

• Keeps enterprise and personal information separate, tracks telecom costs

• Provides integration to middleware applications

• Can deploy an app that is fully functional and ready to use

• Reporting

• SAP analytic and dynamic views

• Telco expense management

• Receives early warnings for cost and usage overages

• Scalability load testing

• Security

• Ensures that data accessed and transmitted by mobile device is protected

Page 20: Is Your Enterprise Ready to Scale Mobile Device Security?

© 2012 SAP AG. All rights reserved. 19

Scalability Testing - Repeatability

XM12 Traffic Generator

NeoLoad Client

Emulator LoadRunner Spirent Studio

AF.Mierlab1.com

AF2.Mierlab2.com

AFAdmin.Mierlab2.com

Relay (in DMZ)

SAP Afaria

MS Exchange

Active Directory/

Domain Controller

Managed

Devices

AWS

Test Tools

Page 21: Is Your Enterprise Ready to Scale Mobile Device Security?

© 2012 SAP AG. All rights reserved. 20

Miercom Mobility Benchmarking

• Build an environment to test performance and scalability with

multiple vendors

• Don’t skirt this issue, literally “break” the news

• Initial benchmarking shows wide disparity of functionality and

performance in environments of 10,000 users and greater

• Register with SAP for complete data set later this quarter

Key Test Goals

• Scalability for 50,000+ clients

• Data integrity test

• Load testing on servers

• Scalability assessment

Page 22: Is Your Enterprise Ready to Scale Mobile Device Security?

© 2012 SAP AG. All rights reserved. 21

Scalability and Load Testing Highlights

• Spirent 4000 Analyzer Testing

• Test (number of protocol mutations):

• DHCP (11,843), IPv4 Datagrams (31,129), ICMPv4 (42,981),

UDP (6,411), SSLv3 (107,476) against servers

• Shell Scripting and other penetration testing

• Metasploit automated common exploitation tactics

• 932 exploits attempted against servers

• Various Web Fuzzing/Injection Protocols

• More than 90,000 injections/fuzz/mutation attacks attempted

from Web application front end

Page 23: Is Your Enterprise Ready to Scale Mobile Device Security?

© 2012 SAP AG. All rights reserved. 22

Enterprise mobility management best practices

Plan for the future

with a platform

Mobile means more

than MDM

Work with SAP, a vendor

that really scales

Innovate and transform

with secure mobility

Page 24: Is Your Enterprise Ready to Scale Mobile Device Security?

© 2012 SAP AG. All rights reserved. 23

Scalability Checklist

Assess your mobile situation, identify your goals

Choose a solution with a database clustering model

Implement a distributed architecture with redundant components

Assure functionality and performance in environments of 10+k users

Expect the unexpected

Page 25: Is Your Enterprise Ready to Scale Mobile Device Security?

Thank You!

Page 26: Is Your Enterprise Ready to Scale Mobile Device Security?

Closing and Q&A

Participate in today’s TweetChat about wholesale distribution

#MobileInsights

SAP Mobile Insights Webcast Series

http://bit.ly/sapmobileinsight

February 13th – Revolutionize Your Asset Management Practices with Mobile

Solutions

February 20th – Spreading the joy of Nutella (and other tasty treats) to the Masses

Mobile Sense Thought Leadership Series (webcasts & white papers):

http://fm.sap.com/mobilesense