Upload
atidan
View
179
Download
1
Tags:
Embed Size (px)
Citation preview
Announcing Azure Enterprise Mobility Suite for SMB including ATA
Presented by: David J. RosenthalCEO, AtidanAugust 5, 2015Microsoft Technology Center, New York City
Agenda What PAINS does EMS solve for?
Overview and Key Points
What’s new with EMS
Technical Components of EMS
Demo
Getting Started
2
Enterprise Mobility Suite (EMS) with Advanced Threat Analytics
Hybrid and Cloud Identity • Single sign-on across multiple SaaS applications• Self Service Password Reset & Group management• Security audit reports & Multi Factor Authentication• Watch the hybrid identity demo
Enabled via Azure Active Directory Premium:
Mobile Device Management• Mobile device settings management• Mobile app management• Selective wipe• Watch the mobile device management demo
Enabled via Microsoft Intune
Data Protection and Security• Information protection• Connection to on-premises assets• Protection from advanced security attacks• Watch the information protection demo
Enabled via Azure RMS and Advanced Threat Analytics:
Device Management, Access Control, Information Protection
Solving Enterprise Mobility Challenges
Mobile Device & App Management• Enable on-premises and cloud-
based management of devices
within a single console
• Provide access to company
resources consistently across devices
• Protect corporate information by
selectively wiping apps and data
from retired and lost devices
Identity & Access Management• Provide users with self-service
experiences to keep them
productive
• Create a unified identity across
on-premises and cloud
• Enforce strong authentication
when users access resources
Information Protection• Secure collaboration inside and
outside of the organization
• Encrypt and apply access
restrictions to any file
• Leverage built-in protection to
ensure file security and
integrity at all times
Application Virtualization• Provide virtual application
experiences on any device,
anywhere
• Extend corporate business
applications to enable
workplace flexibility
Advanced Threat Analysis – identify security breaches before they cause damage with
behavioral analysis for advanced threat detection 8
EMS – Now with ATA & ARM Premium!
From 8/1/2015
New Price effective August 1, 2015
Azure Active Directory
Premium $ 6.00 / Mo
Azure Rights
Management Premium $2.00 / Mo
Microsoft Intune $6.00 / Mo
Advanced Threat
Analytics$3.50 / Mo
$ 8.75 / Mo
50%
Discount vs
buying
standalone
EMS
Per User
Price (ERP
Open NL)
Total $17.50 / Mo
9
Enterprise Mobility Suite (EMS) is licensed as a user-based subscription to license Microsoft’s identity management, mobile device management and information protection products in a single convenient SKU. It is licensed per user per month with an annual commitment, and it allows up to 5 devices per user.
Cloud identity management
Why Microsoft?
Mobile device & app management
Information protection
Azure Active Directory Premium Microsoft Intune Azure Rights Management Service
Ping Identity
Okta
Centrify
Salesforce Identity AirWatch MobileIron
Good
KaseyaSymantec Seclore
FasooAdobe LiveCycle
EMS: One Vendor, One Contract, One SKU
Why Microsoft?
“Point solutions” not comprehensive, need costly integration
• Cloud architecture – always up to date
• Unparalleled management of Office 365
• Comprehensive mgmt. of PCs and mobile devices
• Identity +Access mgmt. with
advanced reporting, threat
analytics, access to 2K+ SaaS Apps
10
EMS IT Manageability benefits for O365 customers
Cloud and hybrid identity management
Mobile device management
Information protection
Enterprise Mobility
Suite
RMS Protection via RMS for
O365
•Protection for content stored in
Office (on prem or O365)•Access to RMS SDK•Bring your own Key
RMS for O365 +
•Protection for on-premises
Windows Server file shares
•Protection for multiple file types,
such as PDF and CAD
Basic Mobile Device
Management via MDM for O365
•Device Settings Management
• Selective Wipe
•Built into O365 Mgmt Console
MDM for O365 +
•PC Management
•Mobile App Management (prevent
cut/copy/past/save as from
corporate apps to personal apps)
• Secure content viewers
•Certificate Provisioning
• System Center integration
Basic Identity Mgmt via Azure
AD for O365:
• Single Sign on for O365
•Basic Multifactor Authentication
(MFA) for O365
Azure AD for O365 +
• Single Sign on for all cloud apps
•Advanced MFA for all workloads
• Self Service group management
and password reset with write back
to on prem directory
•Advanced security reports
• FIM (Server + CAL)
14
O365 has a lot of these features built in, why EMS?
EMS has Azure AD Premium
Security audit reports & Multi Factor Authentication Get unlimited SaaS integrations (free version has a limit of 10) AD Password write-back Advanced administration Azure AD Premium has an SLA
EMS has full Microsoft Intune
Sophisticated Mobile app management Desktop management, no infrastructure required Manage “Everything” not just Office 365 Provision and manage certificates, Wi-Fi, VPN (device and app
specific), and email profiles automatically once a device is enrolled
EMS has full Azure RMS Rights Protect your on-premises/external files as well Document Tracking with Azure RMS
Premium
EMS has Advanced Threat
Analytics
Protection from advanced security attacks On-Premises solution to identify security attacks BEFORE they
cause damange
An on-premises solution to identify advanced security attacks before they cause damage
Credit card companies
monitor cardholders’
behavior.
If there is any abnormal
activity, they will notify the
cardholder to verify charge.
Microsoft Advanced Threat Analytics brings this
concept to IT and users of a particular organizationComparison:
Introducing Microsoft Advanced Threat Analytics
18
Behavioral
Analytics
Detection for known
attacks and issues
Advanced Threat
Detection
Introducing Microsoft Advanced Threat Analytics
An on-premises solution to identify advanced security attacks before they cause damage
19
Microsoft Advanced Threat Analytics Benefits
Detect threats fast with Behavioral
Analytics
Adapt as fast as your enemies
Focus on what is important fast
using the simple attack timeline
Reduce the fatigue of false positives
No need to create rules or policies, deploy agents or monitoring a flood of security reports. The intelligence needed is ready to analyze and continuously learning.
ATA continuously learns from the organizational entity behavior (users, devices, and resources) and adjusts itself to reflect the changes in your rapidly-evolving enterprise.
The attack timeline is a clear, efficient, and convenient feed that surfaces the right things on a timeline, giving you the power of perspective on the “who-what-when-and how” of your enterprise. It also provides recommendations for next steps
Alerts only happen once suspicious activities are contextually aggregated, not only comparing the entity’s behavior to its own behavior, but also to the profiles of other entities in its interaction path.
20
A comprehensive identity and access management cloud solution.
It combines directory services, advanced identity governance, application access management and a rich standards-based platform for developers
It is available in 3 editions: Free, Basic and Premium (Premium in EMS)
What is Azure Active Directory?
22
Mobile application management
PC managementMobile device management
Enterprise mobility management with Intune
Intune helps organizations provide their employees with access to corporate applications, data, and
resources from virtually anywhere on almost any device, while helping to keep corporate information secure.
User IT
26
Comprehensive lifecycle management
Enroll• Provide a self-service Company
Portal for users to enroll devices
• Deliver custom terms and
conditions at enrollment
• Bulk enroll devices using Apple
Configurator or service account
• Restrict access to Exchange
email if a device is not enrolled
Retire• Revoke access to corporate
resources
• Perform selective wipe
• Audit lost and stolen devices
Provision• Deploy certificates, email, VPN,
and WiFi profiles
• Deploy device security policy
settings
• Install mandatory apps
• Deploy app restriction policies
• Deploy data protection policies
Manage and Protect• Restrict access to corporate
resources if policies are violated
(e.g., jailbroken device)
• Protect corporate data by
restricting actions such as
copy/cut/paste/save outside of
managed app ecosystem
• Report on device and app
compliance
User IT
27
Company portal self-service experience
Consistent experience across:
Discover and install corporate apps
Manage devices and data
Ability to contact IT
Customizable terms and conditions
28
Personal apps
Selective wipe
Managed apps Company Portal
Are you sure you want to wipe
corporate data and applications
from the user’s device?
OK Cancel
Perform selective wipe via self-service company portal or admin console
Remove managed apps and data
Keep personal apps and data intact
ITIT
29
Help customers protect their information, wherever it goes
Enable information sharing, while keeping data
protected.
Help protect
information sent
in email by
preventing
viewing, editing,
and forwarding.
Restrict editing,
copying, and
printing files
to specific people
and groups.
Microsoft Azure Rights Management Service (RMS)
Enable customers
to easily apply
rights
management
protection to
information and
files.
32
Manage rightsEncrypt data Enforce policy
Protect data to secure mobility
Azure Active Directory RMS
Share internally Share externally
33
Multiple layers of data protection
ITUser
Enterprise
Mobility Suite
Identify and authorize user
Apply device policies
Apply application policies
Apply content policies
Active Directory Premium
Rights Management
Advanced Threat Analytics
Detect threats before they cause damage
39
Demo
34
Demonstration Video Recording
Special offer from Atidan for implementation and support
1-215-825-5045 x5001
Review individual EMS solution demos
Watch the hybrid identity demo
Watch the mobile device management demo
Watch the information protection demo