What is MobileIron Client?
MobileIron Client, also known as Mobile@Work, is a mobile app that users download to register their devices to the corporate EMM server. Once a device is registered, Client downloads configuration, apps, and other content from Core and enforces security policies established by IT.
What is MobileIron Core?
MobileIron Core is a key component of the MobileIron Platform. It is the administrative console through which administrators can define security and management policies for devices, apps, and content. Core also integrates with enterprise IT systems such as LDAP directories, email, content repositories, and network access control systems. Core may be deployed as a physical hardware appliance or as a virtual appliance using VMware ESX or Microsoft Hyper-V.
How many devices can you support on a single server?MobileIron Core has been tested to manage up to 100,000 devices per server and up to 200 simultaneous device registrations. These numbers may vary based on the customer environment.
What is MobileIron Insight?
Insight is a native mobile application that allows IT administrators to view and manage policies on MobileIron Core. It is available for both iOS and Android devices.
What reporting capabilities does Core support?MobileIron Core collects over 200 fields of data with device, application, user metrics, and status which administrators can use to analyze, visualize, and get actionable insights into their mobile infrastructure. This data can be exported natively to Splunk, or other third-party reporting tools like Tableau, Crystal Reports, and QlikView.
Does MobileIron support delegation of administrative roles and functions?Yes. MobileIron Core now allows IT to establish data and task boundaries to protect user privacy and provide flexible delegation of IT responsibilities. Secure spaces with delegated administration and role-based access enable the global IT lead to provide local IT or helpdesk admins with access to key systems based on their role within the organization. Global IT teams can also determine which devices local IT or helpdesk admins can see and what they can do on those devices. This enables global organizations to gain flexibility and create secure spaces for various functions within which they can complete key actions, while ensuring user privacy.
What is MobileIron Sentry?
MobileIron Sentry is the second component of the MobileIron enterprise mobility management platform. It is an in-line gateway that manages, encrypts, and secures traffic between the mobile device and back-end enterprise systems. Sentry may be deployed as a physical hardware appliance or as a virtual appliance using VMware ESX or Microsoft Hyper-V.
What is MobileIron Connected Cloud?MobileIron Connected Cloud solution is a subscription-based SaaS service. The MobileIron Connector, which sits on-premises in the customer's data center, ensures that Connected Cloud syncs with enterprise resources such as LDAP. MobileIron Sentry, which provides access control for email, is optional and not required.
What is Apps@Work?
Apps@Work is an enterprise app storefront. It is an application distribution library, using which IT can publish approved in-house and 3rd-party mobile apps to end users, based on their role and function within the organization. For end users, Apps@Work is the single source to get enterprise-ready applications to help them be more productive on mobile.
What is AppConnect?
AppConnect is an app containerization technology. It creates a secure container through either an SDK and wrapper for iOS or a wrapper for Android. Apps secured using AppConnect become a secure container whose data is encrypted, protected from unauthorized access. IT can dynamically push app-specific configuration and policies to restrict open-in and copy/paste functions. A key component of AppConnect is AppTunnel which provides secure per app tunneling and access control to protect app data-in-motion.
What kind of apps does AppConnect work with? HTML5, etc.
AppConnect can secure both in-house and 3rd-party applications. Security for HTML5 app is provided by the AppConnect-enabled Web@Work secure browser. A complete list of AppConnect-enabled, 3rd-party apps is available here. In addition to device-at-rest encryption, AppConnect also leverages per-app VPN to secure data-in-transit.
What is MobileIron Tunnel?
Tunnel is an Apple iOS per-app VPN solution. It allows organizations to authorize specific business apps, including internally built and App Store apps, to access corporate resources behind the firewall. Unapproved and personal apps are blocked so that only business data flows through Tunnel.
What is Docs@Work?
Docs@Work is a secure, on-device content repository. It gives the end user an intuitive way to access, store, and view documents from email and enterprise content shares such as SharePoint and lets the administrator establish data loss prevention controls to protect these documents from unauthorized distribution.
How is using Docs@Work different from using the VPN client on my device?
Docs@Work provides secure, VPN-less access to back-end repositories like SharePoint and other CIFS or WebDAV-based file shares. This provides end users seamless access to enterprise content behind the firewall. Docs@Work connects to the intranet via Sentry. As a result, intranet access is restricted to Docs@Work, making it a more secure option than traditional VPNs. Traditional, device-wide VPNs disrupt the user experience by requiring users to manually establish a VPN connection every time they want to access enterprise content. Additionally, device-wide VPNs allow any app on the device to access sensitive data.
Can you view documents offline with Docs@Work?If enabled by the IT admin, end users can save content locally, within the secure Docs@Work container, for offline viewing.
What content management systems does Docs@Work support?
MobileIron Docs@Work works with all CMS systems that support IIS- and Apache-based WebDAV interfaces.
What is Web@Work?
Web@Work is an enterprise mobile browser that enables immediate, secure access to internal websites and web applications, while preserving a native and high-fidelity web browsing experience.
Does Web@Work secure cached data?
Yes. All cookies and cached data are encrypted as part of the AppConnect container. This data can be wiped as a part of a selective wipe should the device fall out of compliance.
What is MobileIron DataView?
DataView is a mobile application that provides mobile data usage monitoring. IT administrators can define data caps and notification settings to alert users when their mobile data use is nearing monthly caps.
Does MobileIron have APIs?MobileIron has developed a set of Application Programming Interface (API) libraries allowing both customers and technology partners to leverage information on the mobile deployment from Core.
What operating systems does MobileIron support?
Can you perform selective wipe and restore?Yes. MobileIron can wipe and restore corporate data while keeping personal data intact.
Can you perform jailbreak/root detection?Yes. MobileIron can detect if an iOS or Android device has been compromised and can block the device from accessing corporate resources.
Can you restrict voice, SMS, and data?No, because most operating systems do not allow it. Restricting voice calls also introduces liability in an emergency situation. Instead, the MobileIron solution allows administrators to set thresholds and mobile data usage caps for any time period, and provides real-time notification using DataView.
Can you prevent or force OS upgrades?No, because most operating systems do not allow it. Instead, the MobileIron solution allows for real-time insight into operating system version (and policy compliance, including whether a phone is jailbroken/rooted) and informs administrators of non-compliance. However, administrators can set policies based on OS version and block certain versions from accessing enterprise resources.
Can you prevent or force application installation or removal?No, because most operating systems do not allow it. It is not in the interest of the OS vendor to restrict what applications can be installed on the device. Instead, MobileIron allows monitoring of applications that are installed on a device and informs administrators and users of non-compliance. Please note that web-clips are not applications, though they appear similar; web-clips, in contrast to apps, may be forcibly removed or installed at will.
Is the MobileIron Platform certified for FIPS 140-2 compliance?
Yes. The MobileIron platform is certified for the use of FIPS 140-2 cryptographic modules. Our FIPS 140-2 certification letters are available here.