Question - Sophos Mobile Control

Hello max09,

my level of knowledge is

well, you've taken the first step to achieve a higher level of knowledge :smileywink:.

If you think about it, the answer is rather simple. Whether iOS or Android (or some other mobile OSs) one of the features is a "pushed" install and configuration [in fact being able to push content to the mobile is (for operators and content providers) perhaps the most important feature]. Of course there are built in safeguards so that only authorized content and/or a push from authorized servers is accepted by the device.

Think of the lock and wipe functions you (as registered owner) can use on your iOS device - you can request them over the web or from another device. Also while (as in case of iOS) apps are not permitted to access other app's data some basic information can be "legally" extracted. SMC leverages the existing features to allow central management of a group of devices.

Is this sufficient explanation for a start?

Christian 

Hello Christian,

thank you for your answer.

I have read about Apple's APN Services which should realise this push commands for iOS devices.

So, is the meaning of your answer, that Google developed a similar service and one is able to install / uninstall applications (from appstores AND/OR company-owned) over the air without ANY user interaction.

For example:

I go to an appstore and download some applications (e.g. to a local folder). After that I use this application with SMC and have the possibility to use this application and push it to iPhones, iPads or Android devices. --> Now the user has the app-symbol on his screen an can use it.

Another example:

Some users use applications on their devices which are not against company policies. Because of the "application-list" on SMC I will see this application and can push an uninstall to these devices. --> Now the applications disappear and users are not able to use them anymore.

Will these the examples work?

BR

Hello BR,

SMC does not "force" something on any of these devices. You start by self-registering the device with the server which then send the necessary component(s) to the device. At this step you have to confirm the changes and/or give the app the necessary permissions. Again - it requires confirmation on the device by the device owner. But from then on the device can be administered remotely.

You've probably seen the general information about SMC but there's are also detailed documentation available here (expand User manuals and help - scroll down to the Sophos Mobile Control .... documents). These will probably answer more questions than you have now :smileyvery-happy:.

Christian

Hello Christian,

I think, that I understand it now.

I will read more details about SMC to receive some more information.

So, thank you very much for your fast and helpful response. I'll be back with more questions later :smileyvery-happy:

best regards

Hi Max09,

there is also another important difference between Google and Apple

Google does allow you to use other app stores, Apple doesn't. Downloading from a local website would be another app store.

So the answer for iOS is, that you can either download from the official app store or you must have a so called Enterprise App Store, which allows the download of self written apps. This is all protected with certificates and similar and very well protected (basically, the Apple business model more that your phone :smileyhappy:)

Best regards

Thomas