BYOD Security: The DLP and MDM Handshake | Features | ChannelWorld.in

PARTNER HOTLINES

BYOD Security: The DLP and MDM Handshake

By Yogesh Gupta, ChannelWorld India on Oct 29, 2012

Solution providers need to engage coherently with security vendors to execute a successful, profitable and sustainable ‘BYOD’ journey across their enterprise customers.

BYOD—And the increasing use of mobile devices among enterprises—is a bandwagon that every technology vendor and channel partner worth their salt are keen to ride over the next few years.

However, one thing stands in their way: CIOs.

BYOD (bring your own device) is a long-term strategy for CIOs, who for the most part, are treading cautiously because of multiple issues including security, compliance, ROI, and TCO. In response, security vendors (security is an important part of the BYOD story) are empowering and hand-holding the partner community, to bring more clarity to CIOs and win partner enterprise mobility deals.

“Compliance is not much of an issue with BYOD compared to securing device and data access, assigning rights to people, and managing the entire piece at an enterprise end,” says Amitabh Jacob, channel director, India and SAARC, Symantec. “That’s why DLP plus MDM has become critical.”

“If companies want to manage and secure mobile devices effectively in today’s complex IT environment, they need to treat them like any other endpoint, and manage them from a single console,” says Sajan Paul, director, systems engineering, Juniper Networks India.

The Security Link

Joel Camissar, practice head, data protection, McAfee APAC, says that, “people recognize that DLP plus MDM creates an ideal protection.

MDM gives them visibility and control over devices. Ultimately, if you can protect data and allow access to it based on the needs of the user, you will have stronger protection.”

The ideal mobile security and management strategy follows devices through their lifecycle—from provisioning and management, to security, and eventually, device retirement—and is designed to prevent data from leaving the organization regardless of where it resides. That’s why DLP becomes a component of an overall mobile strategy, says Jacob.

“Our BYOD pitch is more end-to-end, and not limited to a specific anti-virus or MDM solution or inventory management software. Our solutions have features like finger printing the device and designing heat maps according to the usage of the device by employees. Security depends on the level of risk attributed to the  data,” says Paul. “BYOD usually begins with VPN access which extends into MDM, DLP and other pieces of mobility,” he adds.

“MDM is important from an integration point of view as well as an overall device management perspective,” says Ramandeep Singh, head of system engineering, pre-sales consulting team (India & SAARC), Check Point Software Technologies.  “Traditional DLP is not the answer. In fact document management is the most practical solution for BYOD,” he says.

But, Fortinet is pursuing a different approach. “BYOD is part network and part application access, and we tackle it from a wireless access perspective by addressing security from the perimeter to access point,” says Vishak Raman, senior regional director-India & SAARC, Fortinet. Fortinet UTM has a strong DLP function at the perimeter level to control data leaks and Forti Gate client at the desktop level. At least, at the access point level, data needs to be secure for BYOD, he adds.

Overcoming Roadblocks

Technologically, the biggest roadblock for DLP plus MDM is the fact that the mobile world has many operating systems (iOS vs Android vs Win8) which are fragmented (Android 2.2-4.1 implemented across devices) and are closed (agents aren’t an option like they are on PCs) according Camissar at McAfee.

“The biggest challenge is the possibility of an executive’s mobile device being infected with malware outside the corporate network and them bringing that device onto the corporate network” says Raman.

ALSO READ: Will BYOD go Mainstream in India by 2013-14?

“MDM is not always important under BYOD as the corporate is not worried about the private information of employees. The concern is around the threat to corporate IP which means that MDM becomes critical,” says Paul at Juniper. Junos pulse—a single client by Juniper—works across five major mobile OSes.  Junos helps secure the connection, protect the device, and control MDM, says Paul.

Culturally and psychologically, DLP in a mobile environment is difficult to implement and maintain from an administrator’s perspective. At the same time, protecting data is much less of a concern for the mobile user, says Camissar.

Connecting with Partners

McAfee is taking a long-term view where technology is only a part of the solution. For them the creation of best practices and business processes is important. “From a channel perspective, there is a lot of opportunity  to sell the methodology around technology, including best practices and business process, or even sell ongoing management and consulting services using the same tools,” says Camissar.

“Partners have the advantage of working with products that address such specific customer requirements, like DLP for tablets. The Symantec DLP and Mobile Management solutions allow DLP customers to leverage their existing investments by utilizing the same policies and management infrastructure,” says Jacob.

There is no silver bullet for BYOD. Enterprise partners need to spin an integrated story around MDM, DLP, and security says Raman at Fortinet. Systems integrators can stitch together solutions and enjoy decent margins rather than rely on product sales alone, he adds.

Check Point has bundled few units of their USB drive GO (earlier Abra) with their UTM. “This baby step towards BYOD ensures partners cross-sell and facilitate BYOD in the future,” says Singh. With the launch of document management in the next couple of months, we envisage a different strategy of gross margin and reducing sales cycles for partners, and an overall demystification of BYOD,” he says.

The Consultant Approach

DLP is one of the solution specializations that Symantec offers channel partners through which they can attain Silver, Gold or Platinum levels within the Symantec Partner Program. Partners play a critical role in encouraging customers to take the right approach in securing and managing their information and infrastructure.

A partner should proposition a VPN customer and help them migrate to BYOD, and then we can add mobile security and an MDM suite, says Paul. Networking and security partners of Juniper work across datacenters, security, campus and BYOD, and hence become an extension to the overall portfolio.

“The biggest avenues are in highly-regulated industries, or in businesses holding customer sensitive data, where employers are likely to have greater authority in asking employees to overlook their privacy concerns if employees want to use a personal device to access company systems. On the other hand, non-regulated industries or businesses holding less sensitive data may want to apply security programs to help manage risk where MDM might come into picture,” says Camissar at McAfee.

“The numbers for standalone device/solution sales like a single firewall is expected to slow down as organizations demand security and connectivity as a single piece around BYOD. Partners can go up the value-chain and act as consultants rather than suppliers,” says Paul.

So, is CYOD (choose your own device) a better option for channel partners? “Protection of data is critical. It’s easy to make a quick decision to try and address it on mobile devices, but you could end up regretting it later. While implementing a smart combination MDM and security (McAfee’s EMM bundled with Secure Container and Virus Scan Mobile) in the short-term, you also need to be thinking about the long-term which should include best practices and new business processes,” says Camissar at McAfee.

“Employees should be allowed to operate their devices whether it’s a laptop, tablet, or smartphone in the office with secure access to business applications, similar to their desktop experience. That is the essence of BYOD or CYOD,” says Singh at Check Point.

“Be it BYOD or CYOD, organizations need to define IT policies after identifying what is critical information to them and how it is to be used. A specialized partner can play a critical role in advising customers and helping them choose a holistic approach that suits their business requirements,” says Jacob.


Latest Features

EDITOR'S PICK

Forecast 2015: IT Spending On An Upswing

As purse strings loosen up, CIOs blend innovation into 2015 IT budgets, but security and cost containment remain top priorities.

‘Security Compliance is Not a Proactive Phenomenon in India’

Pavan Duggal, Cyber Law Expert at the Supreme Court of India, explains why channel partners need to look beyond the IT Act 2000 as the security standards, given today’s fast-changing threat landscape, rapidly evolve.

IT is Indispensable for Business Optimization: David Aires, Intel

David L. Aires, VP, Information Technology Group, and GM, Information Technology Operations, believes security to be the biggest challenge in the current IT environment.

Is the CIO Role Nearing Extinction?

New technologies are shifting power to the hands of the user, endangering the CIO role. But do Indian CIOs consider that a threat or an opportunity? 

The Authentication Market is Big Play for Channels: Gaurav Chawla, Gemalto

We are building a partner network to address the increased demand for authentication solutions across India, says Gaurav Chawla, Director, IAM, Gemalto India.

Versatile Infosecurity: Riding the Security Wave

It takes vision and persistence to stay on top of the security curve. Versatile Infosecurity has mastered that art.

How Futurenet Technologies Helped Sterlite Copper Adopt Next-gen Client Computing

Sterlite Copper was able to successfully adopt next-gen client computing facilities with hand-in-hand assistance from Chennai-based Futurenet Technologies.

DigitalTrack Solutions: Right on the Security Track

DigitalTrack is keeping pace with the changes in the IT security space through DDoS and WAF solutions and is pushing security audits as part of its next move.

SLIDESHOWS

6 Leaders Who Headed for an Abrupt Exit

The abrupt exit of top leaders of Indian and global tech companies this year, with many of them citing ambiguous reasons, surprised the technology world.

Gartner Executive Summary Survey 2014

Gartner's Annual CIO Survey highlights the trends that will drive organizational IT spend in 2014.

10 Overhyped Tech Products That Crashed and Burned

The demos blew everyone away. Then reality hit.

Gartner Executive Summary Survey 2014

Gartner's Annual CIO Survey highlights the trends that will drive organizational IT spend in 2014.

ChannelWorld Survey: State of the Market 2014

Partners poll their sentiments, expectations, pain points, and challenges for the coming year.

FAST TRACK

Mudra Electronics

A vendor-agnostic strategy helped us sustain business, says Bharat Shetty, CMD, Mudra Electronics.

Systematix Technologies

Our USP is a customer-friendly approach backed by services, says Akhilesh Khandelwal, Director, Systematix Technologies.

CorporateServe Solutions

Our ability to turnaround complex ERP projects in record time is what gets us customer referral, says Vinay Vohra, Founder & CEO, CorporateServe Solutions.

KernelSphere Technologies

We are emerging as an end-to-end systems integrator, says Vinod Kumar, MD, KernelSphere Technologies.

Uniware Systems

We constantly validate emerging technologies for first-mover advantage, says Vergis K.R., CEO, Uniware Systems.

Astek Networking & Solutions

An innovative approach helps us stay successful, says Ashish Agarwal, CEO, Astek Networking & Solutions.

CSM Technologies

Our approach is backed by innovation and simplicity, says Priyadarshi Nanu Pany, CEO, CSM Technologies.

ETSC Computers

We want to be recognized as a complete solution provider, says Kailash Gupta, Director, ETSC Computers.

VIDEOS

Arun Parameswaran on VMware’s Cloud, Mobile, SDx Strategy

Arun Parameswaran, MD, VMware India, talks about transformation, strategy, roadmap, and VMware’s role in driving the shift to cloud, mobile, and SDx.

Parag Arora, Citrix: Our Portfolio Will Augment Our Strategy

Parag Arora, Area Vice President, Citrix India, elaborates on his action plan for the company after taking over operations in India.

Shibu Paul, Array Networks: ADN is a Great Business Opportunity for Channels

Shibu Paul elaborates on how Array Networks is empowering its partner ecosystem to address the modern datacenter challenges in India.

Scott Robertson, WatchGuard: We are an End-to-End Security Solutions Company

Scott Robertson of WatchGuard elaborates on the company’s partner roadmap in India and its subsequent shift in the security space.

Gaurav Ahluwalia, R&M: Channels Will Accelerate Our Datacenter Business

Gaurav Ahluwalia of R&M speaks on the company’s renewed focus to build its channel ecosystem and address the datacenter demands of India Inc.

Venkat Murthy, 22by7 Solutions: Real Value is in Solutions

Venkat Murthy, Prime Mover, 22by7 Solutions, elaborates on the need to look at a solutions approach rather than a mere hardware approach.

What Channel Partners Can Learn from a Sahara Adventurer

Steve Donahue, a desert adventurer and a best-selling author, takes experiences from this travels in the Sahara and turns them into lessons for channel partners, as they navigate the shifting sands of today's business and IT environment.

Rahul Agarwal, Lenovo: Profitability and Value Proposition are Vital

Rahul Agarwal, executive director, Commercial Business Segment, Lenovo India, talks about Lenovo’s renewed channel strategy and why the company is now an attractive proposition for its partners.

EMC PARTNER SHOWCASE

Partnering for Profitability

Atul H. Gosar, Director, Network Techlab, shares how the company’s association with EMC has provided it with a competitive edge and a wide customer base, leading to increased profitability.

Sponsored Content

Promising Pipeline

Venkat Murthy, Prime Mover, 22by7 Solutions, shares how EMC brings in competitive edge by enabling technology, GTM and lead generation, helping 22by7 acquire new customers and retain old ones.

Sponsored Content

Powerful Performance

Deepak Jadhav, Director, VDA Infosolutions, says initiatives by EMC around training and certification have helped the company’s staff improve its performance and enhance customer experience.

Sponsored Content

Performance Booster

Rajiv Kumar, CEO, Proactive Data Systems, says that the solution provider’s association with EMC has helped expand its customer base and added value to existing offerings.

Sponsored Content

Pursuit of Profitability

Santosh Agrawal, CEO, Esconet Technologies, shares insights on how the systems integrator’s association with EMC has spelled sustained success over the years.

Sponsored Content

Non-Performance is Not an Option

Nitin Aggarwal, Director, Trifin Technologies, shares insights on how the association with EMC has helped the system integrator stand out and empowered its personnel to deliver consistent performance.

Sponsored Content

STRATEGIC DIRECTIONS 2014

Driving IT to Make an Impact: IDC

IT is being increasingly viewed as something which would help drive revenue rather than just another cost line-item.

Software-Defined Infrastructure: Forrester

Firms must invest in transforming infrastructure to eradicate complex infrastructure to keep pace with business needs.

Better Safe Than Sorry: PwC

Organizations should create a culture of security that starts with commitment of top executives and cascades to all employees and third parties.

New Skills for a New Era: Gartner

A new talent strategy is required—one that is a key part of the evolving IT strategy and one that focuses on a blend of business and modern IT skills.

The Rise and Growth of Big Data: Ernst & Young

Leading organizations are reaping rich rewards on their investment in big data even as competition struggles to keep pace.

SOCIAL MEDIA @ CW India
SIGNUP FOR OUR NEWSLETTER

Signup for our newsletter and get regular updates.