Loading ...

Category: Mobile Device Management (MDM)

Mobile Device Management for SMBs: Enhancing Android and iPhone Security with MDM

In today’s digital age, mobile devices have become an integral part of our lives, both personally and professionally. With the increasing reliance on smartphones and tablets, businesses, especially small and medium-sized enterprises (SMBs), need to prioritize mobile device security. One effective solution for enhancing Android and iPhone security is Mobile Device Management (MDM). In this article, we will explore the benefits of MDM for SMBs, its role in enhancing Android and iPhone security, and how businesses can implement MDM to safeguard their sensitive data.

1. Understanding the Importance of Android and iPhone Security

Android and iPhone, being the most widely used mobile operating systems globally, have become a prime target for cybercriminals. With its open-source nature and extensive app ecosystem, Android devices are susceptible to various security threats, such as malware, data breaches, and unauthorized access. With its user-friendliness and built-in trust, iPhone users are easily tricked into downloading and installing malware which leads to data breaches and unauthorized access. SMBs, in particular, need to be proactive in securing their Android and iPhone devices to protect sensitive customer information, intellectual property, and maintain regulatory compliance.

2. Introducing Mobile Device Management (MDM)

Mobile Device Management (MDM) is a comprehensive solution that enables businesses to centrally manage and secure their fleet of mobile devices, including Android and iPhone smartphones and tablets. MDM provides IT administrators with granular control over device settings, app distribution, security policies, and data management. By implementing MDM, SMBs can streamline device management, enhance data security, and ensure compliance with industry regulations.

2.1 Benefits of MDM for SMBs

  • Centralized Device Management: MDM allows businesses to manage multiple Android devices from a single console, simplifying device provisioning, configuration, and updates.
  • Enhanced Security: MDM enables IT administrators to enforce security policies, such as password requirements, encryption, and remote wipe capabilities, ensuring that lost or stolen devices do not compromise sensitive data.
  • App Distribution and Management: With MDM, businesses can distribute and manage apps on Android devices, ensuring that only authorized and secure applications are installed.
  • Secure Content and Data Management: MDM provides secure containers or workspaces on Android devices, segregating business data from personal information and enabling seamless data synchronization.
  • Compliance and Reporting: MDM offers robust reporting capabilities, allowing businesses to monitor device usage, enforce compliance regulations, and generate audit trails.

3. Implementing MDM for Android and iPhone Security

Implementing MDM for Android and iPhone security involves a series of steps to ensure a seamless deployment and effective device management. Let’s explore the key considerations and best practices for SMBs looking to implement MDM.

3.1 Assessing Business Needs and Objectives

Before implementing MDM, SMBs should assess their business needs and objectives. This includes identifying the number of devices to be managed, understanding the security requirements, and evaluating the compatibility with existing IT infrastructure.

3.2 Choosing the Right MDM Solution

There are numerous MDM solutions available in the market, each with its own set of features and capabilities. SMBs should carefully evaluate different MDM vendors, considering factors such as scalability, ease of use, security features, integration capabilities, and cost-effectiveness.

3.3 Defining Security Policies and Configuration

Once the MDM solution is selected, SMBs need to define security policies and configurations. This includes setting password requirements, enabling device encryption, configuring firewall settings, and defining app installation permissions. The policies should align with industry best practices and compliance regulations.

3.4 Device Enrollment and Onboarding

After defining security policies, SMBs can proceed with device enrollment and onboarding. This involves registering Android devices with the MDM system, configuring device settings, and installing necessary security profiles and certificates.

3.5 Monitoring and Maintenance

MDM is an ongoing process that requires continuous monitoring and maintenance. SMBs should regularly review security policies, update device configurations, patch vulnerabilities, and conduct security audits to ensure the effectiveness of the MDM solution.

4. Android vs. iPhone: MDM Considerations

While Android devices are more susceptible to security threats due to their open nature, it is essential to consider the unique security challenges posed by iOS devices, such as iPhones and iPads. Although iOS has built-in security features, SMBs should evaluate MDM solutions that offer comprehensive support for both Android and iOS devices to ensure consistent security across their mobile fleet.

5. The Future of MDM and Android Security

As technology evolves, the landscape of mobile device security continues to change. The future of MDM and Android security holds promising advancements, including:

  • Machine Learning and AI: MDM solutions can leverage machine learning and AI algorithms to detect and prevent emerging security threats proactively.
  • IoT Integration: With the rise of the Internet of Things (IoT), MDM will encompass managing and securing a broader range of devices, including wearables and smart home devices.
  • Biometric Authentication: MDM solutions will increasingly utilize biometric authentication, such as fingerprint and facial recognition, for secure device access.
  • Containerization and Virtualization: MDM will further enhance data security by implementing advanced containerization and virtualization techniques, isolating business data from personal information.

If your SMB is seeking to enhance Android and iPhone security by leveraging the benefits of MDM, contact us for professional assistance and guidance tailored to your specific needs.

The Secret Benefits of IT Equipment Lifecycle Management

Equipment Lifecycle Management

In today’s fast-paced business environment, effectively managing IT equipment throughout its lifecycle has become essential. Equipment Lifecycle Management (ELM) refers to the systematic approach of acquiring, operating, maintaining, and disposing of equipment. By implementing an ELM strategy, businesses can maximize the lifespan and productivity of their equipment, while also minimizing costs and downtime. Let’s explore some of the secret benefits of equipment lifecycle management.

Cost Optimization

IT equipment can represent a significant investment for businesses. Through ELM, companies can optimize costs by planning IT equipment updates and replacements in a strategic manner. With a clear understanding of the IT equipment’s lifespan and maintenance requirements, businesses can budget for these costs well in advance, avoiding unexpected expenses that could negatively impacting their finances.

Increased Equipment Efficiency

One of the primary goals of ELM is to maximize equipment efficiency and productivity. By conducting regular inspections, maintenance, and repairs, businesses can identify and address performance issues before they become major problems. Proactively managing IT equipment ensures that it operates at optimal levels, reducing downtime and improving overall operational efficiency.

Enhanced Asset Tracking and Planning

ELM provides businesses with a comprehensive understanding of their equipment inventory. Through proper record-keeping and asset tracking systems, companies can easily identify the location, condition, and maintenance history of each piece of IT equipment. This information enables businesses to plan for IT equipment updates, replacements, or adjustments based on their lifecycle and performance, ensuring that resources are allocated efficiently.

Sustainable and Environmentally Responsible Practices

Efficient IT equipment management is not only beneficial for businesses but also for the environment. By properly maintaining and disposing of equipment, companies can significantly reduce waste generation and minimize their carbon footprint. Implementing ELM strategies, such as equipment reuse or recycling programs, aligns with sustainable business practices and demonstrates a commitment to environmental responsibility.

Effective equipment lifecycle management is crucial for businesses looking to optimize costs, improve productivity, and minimize their environmental impact. By proactively managing IT equipment throughout its lifecycle, companies can maximize its efficiency, extend its lifespan, and ensure smooth operations. Investing in IT equipment lifecycle management ultimately leads to long-term benefits and a competitive advantage in today’s business landscape.

If you haven’t already, contact us to implement an ELM strategy for your business.

Zero Trust – Endpoint Security

Endpoint Security - Clackamas, OR

This is the sixth in a series about the concept of Zero Trust, which means in the IT sense that you trust nothing and always verify everything surrounding and connected to your network. Today’s discussion will be on endpoint security. 

Endpoint Security

Endpoint security is a fancy term used to describe how the computers on the network are protected. This used to be done by antivirus but due to the complexity of the attacks hackers are using to compromise networks these days, the definition has expanded greatly. This now includes things like Enhanced Detection & Response software, Security Operations Centers, DNS Filtering, employee train and more. Here are some questions that you should be asking yourself:

  • Are your endpoints protected by antivirus or enhanced detection & response?
  • Is website traffic being monitored? Restricted?
  • Are your employees being trained in cyber security?
  • Are computer logs being monitored for malicious activity?
  • Would unusual or suspicious activity on a computer be noticed? Alerted on?
  • Do you have security permissions set on all file shares?
  • Do you have least privileged access configured on those shares?
  • Do you keep track of what software is installed on all workstations?
  • Do you block access to unauthorized software?
  • Are files encrypted on servers and workstations?
  • Are your mobile devices managed? Can you wipe them remotely?
  • Are USB ports blocking removeable storage devices?
  • Are endpoints set to automatically log-out?

If your company is going to use full disk encryption or has compliance requirements that you need consulting for, then contact us for assistance.

Celebrating 3 Years of Serving Grants Pass

3 years in business

It is official – the month of September marks three years in business for Farmhouse Networking. We have been truly blessed by God to have been able to serve the Grants Pass and surrounding business communities by providing exceptional IT managed services. We look forward to many more years of giving you the highest level of support possible so that you can focus on getting business done. With this anniversary we plan on rolling out some enhancements to our monthly service offerings:

Enhanced Monthly Maintenance


Standard Maintenance: For those who are not current managed clients, these basics have always been a part of our service offering:

  • 5-year Technology Plan & Budget
  • Full Network Inventory
  • Hard Disk Checkups (Bi-Monthly)
  • Hard Disk Defragmentation (Monthly)
  • Temporary File Cleaning (Weekly)
  • Anti-Virus Software (Constant Monitoring)
  • Operating System Updates (Weekly)
  • Error Log Monitoring (Constant Monitoring)
  • Power Settings Management (Constant Monitoring)
  • Windows Services (Constant Monitoring)

Continued Improvements: Over the past 3 years we have also added the following features to our service at no additional costs:

  • Ticketing System Portal
  • Email Support to Create Tickets
  • Security Incident Response Plan
  • Vendor Information Tracking
  • Third-Party Software Updates (Monthly on Firefox, Chrome, Acrobat Reader, ….)
  • Email Blacklist Checking (Daily)
  • Warranty Checking (Monthly on All Major Brands)
  • Operating System Intrusion Detection (Constant Monitoring)
  • Support for MacOS & Linux (Constant Monitoring)
  • Server Applications (Constant Monitoring)
  • Hardware Events (Constant Monitoring)

Enhancements to Come: In September, we will be adding these new exciting features to our service:

  • DNS filtering – this will further protect your network from external threats by stopping accidental surfing to malicious sites. It also can increase productivity and network speeds by limiting wasteful frivolous surfing during company time.
  • Dark Web Scan – Each monthly client will have the “Dark Web” scanned to see if any email addresses connected to the company have been involved in a previous password breach.
  • Weekly Security Newsletter – Farmhouse Networking is partnering with a national security non-profit to deliver up-to-date news and information about how to stay safe online. These weekly newsletters will be packed with valuable information and delivered to everyone in your organization.

As our service offering has expanded, we have deepened our ability to monitor our customers networks to proactively respond to alerts before they become problems. We have continued to add levels of protection to make sure that our clients systems are safe from the ever-expanding list of threats. All this has been done at no additional cost, despite inflation, up to this point. To continue offering this high level of service, Farmhouse Networking is making a couple small changes to its prices that will be effective September 1st, 2018.

  • Monthly Maintenance Clients – our services are based on a per device basis and the cost per workstation will be $25 per month for remote maintenance and $50 per month for full service maintenance. All other prices will remain the same for every other device on the network. This will only effect clients whose contracts are renewing after September 1st, 2018 – any renewed before that will keep their prices the same for the next 12-month term.
  • Small Business Clients – those who do not have a server and have less than 5 workstations, our hourly rate will be $80 per hour for on-site service and $40 per hour for remote service (billed in 15-minute increments). That is only $10 more for on-site support and $5 more for remote support.
  • Standard to Medium Clients – those with a server or more than 5 workstations, our hourly rate will be $120 per hour for on-site service and $60 per hour for remote service (billed in 15-minute increments). That is only $10 more for on-site support and $5 more for remote support.
  • Tier-3 Clients – those technology companies that utilize our advanced expertise to better serve their clients, our hourly rate will be $40 per hour for remote service (billed in 15-minute increments). That is only $5 more for remote support.
  • Charity Clients – those non-profits that pay for support, our hourly rate will remain at $70 per hour for on-site service and $35 per hour for remote service (billed in 15-minute increments).

For all our monthly maintenance clients, we will be calling to schedule our semi-annual meeting to check-in with you during the month of September. At that time we will be performing another network inventory to insure that all network assets are covered properly under your current contract. We cannot thank all our clients enough for your continued use of our IT services. We look forward to continuing to serve you.

Know the state of your flocks,
and put your heart into caring for your herds,
for riches don’t last forever,
and the crown might not be passed to the next generation.
After the hay is harvested and the new crop appears
and the mountain grasses are gathered in,
your sheep will provide wool for clothing,
and your goats will provide the price of a field.
And you will have enough goats’ milk for yourself,
your family, and your servant girls.
Proverbs 27:23-27

Setup Microsoft Mobile Device Management (MDM)

Recently had some issues where another tech company was unable to properly setup MDM for their clients, so reviewed the documentation and their current efforts then came to the conclusion that they had skipped a couple steps in the initial setup that were causing the issue. Here is the proper initial setup steps:

Activate Mobile Device Management in Office 365

1. Sign in to Office 365 as an administrative user
2. Click on the Admin pane
3. Click on Mobile Management on the list to the left hand side
4. Click on the “Get Started” button
5. Wait awhile (5 minutes to 2 hours) for the setup to complete

Configure Initial Domain DNS Settings

1. Back in the Mobile Management section, look for the red x circle and click on “Manage settings”
2. First to configure custom DNS needed for automatic configuration, click on the “Set up” next to “Configure domains for MDM”
3. Click on the primary domain used for Autodiscover, etc. then click on “Domain settings”
4. Under “Domain purpose” click on “Change domain purpose”
5. Put a check next to “Mobile Device Management for Office 365” then click on “Next”
6. Take note of the following cname records:

enterpriseregistration enterpriseregistration.windows.net 3600
enterpriseenrollment enterpriseenrollment.manage.microsoft.com 3600

7. Enter these into the customers custom DNS records along with any others that are listed on that page which weren't entered previously.
8. Return to this page to confirm that the DNS settings have changed properly.

Configure Apple Push Notification (APN) Certificate

1. Back in the Mobile Management section, look for the red x circle and click on “Manage settings”
2. Click on “Set up” next to “Configure an APNs Certificate for iOS devices” to request the needed certificate to manage Apple devices.
3. Click on “Download your CSR file” to save the file locally then click “Next”
4. Click on “Apple APNS Portal” to open the Apple Push Certificates Portal
5. Sign in with a valid (hopefully domain associated) Apple ID
6. Click on the “Create a Certificate” button
7. Agree to the Terms of Use
8. Upload the Certificate Signing Request (CSR) that was save locally earlier
9. Download the new Mobile Device Management certifcate and save it locally
10. Go back to the “Install Apple Push Notification Certificate” page and click “Next”
11. Upload the new Mobile Device Management certifcate tjat was saved locally from Apple

Configure Basic Mobile Device Management Policy

1. Create a Security Group in Active directory that will be used to apply the MDM policy and run DirSync manually.
2. Back in the Mobile Management section, click on “Manage device security policies and access rules”
3. Click on the + to add a new policy
4. Give the policy a name and click “Next”
5. On the pop-up page leave the defaults and check next to “Require managing email profile (required for selective wipe on iOS)”
6. Also select “Block access and report violation” to keep users off the network until they comply with the new policy then click “Next”
7. On the following page there are additional option that give additional security but are not required, when done click “Next”
8. Change selection to “Yes” and chose the Security Group in Active Directory that will be used for MDM enforcement then click “Next”
9. Click on “Finish” to begin enforcing this new policy

The next time any user opens an associated Office App on their supported devices it will ask them to start the enrollment process which goes through a compliance check which usually requires them to delete their current Exchange Active Sync profile to continue.

Special thanks to the guys at ExchangeServerPro.com for their blog entry with the basics. Also a thanks to the Microsoft Office Blog Team for their detailed look at MDM policy setup.
If your company is using Office 365 or has a Bring Your Own Device (BYOD) policy which need mobile device management, then contact us for assistance.

Archives

Categories

Plant a Seed @ 541-761-9549
233 Rogue River Hwy #873 Grants Pass, OR 97527
Mon-Fri: 9:00am-5:00pm
support@farmhousenetworking.com
© 2016-2023- Farmhouse Networking. All rights reserved
Terms and Conditions Privacy Policy

Evaluation Signup

[contact-form-7 id="452" title="Free Network Evaluation"]
And God will generously provide all you need. Then you will always have everything you need and plenty left over to share with others. As the Scriptures say,
“They share freely and give generously to the poor. Their good deeds will be remembered forever.”
For God is the one who provides seed for the farmer and then bread to eat. In the same way, he will provide and increase your resources and then produce a great harvest of generosity in you. - 2 Corinthians 9:8-10