MOBIwm.com - 855.259.6624 ActiveSync vs MDM

As enterprise mobility environments continue to evolve, the popularity of security and device management solutions is on the rise. However, the rise in popularity doesn’t make the process any less confusing. As with anything in life, it’s important to understand the pros and cons of implementing different solutions before you take the plunge. A common misconception that arises during this discussion involves the level of security that an email server, like Microsoft Exchange ActiveSync, offers in a corporation’s mobile infrastructure. Long story short—ActiveSync isn’t doing very much in the way of protecting corporate data.

If securing sensitive data is a top priority for your organization, an MDM solution is essential. Further, ActiveSync and MDMs are not mutually exclusive solutions to the issue of security. As aforementioned, ActiveSync is an email server, like Blackberry’s BES (RIP). Aside from being password protected, it is not intended to be a robust security measure. The following is a comprehensive list, based on research as well as discussions with mobility experts, of the pros and cons of both types of “solutions”—ActiveSync and MDM.

ActiveSync (according to Microsoft’s definition): a Microsoft Exchange protocol that lets you synchronize a mobile device with your Exchange mailbox. Let’s mobile phones access an organization’s information on a server running Microsoft Exchange. Enables mobile phone users to access their email, calendar, contacts, and tasks, and continue to access this information while they’re working offline.

•Pros:

○ Costs are all-inclusive with purchase of Exchange email server

○ Easy and quick set up

•Cons:

○ Personal and corporate data and apps are combined on the device

○ Grouping of devices and reporting is difficult ▫ IT team is not notified of usage until same account is registered on more than 10

devices, allowing for serious security issues.

○ Can only control future actions; no retroactive capabilities ▫ If a device is compromised, ActiveSync can only stop future emails from reaching the

phone’s inbox. All existing emails, calendar events, and contacts will remain intact.

ACTIVESYNC VS MDM

MOBIwm.com - 855.259.6624 ActiveSync vs MDM

Mobile Device Management (MDM): Software that secures, monitors, manages, and supports mobile devices in an enterprise setting.

•Pros:

○ Corporate data and personal data can be separated

○ Administrator visibility is limited to the apps and the data in the apps, protecting employees’ privacy ▫ While security measures are heightened with an MDM, there are still parameters

around what is and is not visible to administrators. For example, they can see what applications are installed on the device, but cannot track specific activities within those applications.

○ Better control of multiple types of operating systems

○ Consequences of losing phone or forgetting PIN less severe; only the MDM solution needs to be wiped as opposed to the entire device ▫ If the employee’s device is lost or stolen, there is also an option, based on the type

of licensing the company has purchased, to wipe the entire device if they so choose.

○ Better scalability for managing larger groups of devices

○ Ideal for corporate-owned devices that need monitoring and increased security ▫ When an employee joins a company, they download the MDM software, installing

corporate email and corresponding applications on the device. If and when that employee leaves the company, the MDM is wiped from the phone, solely removing the features that were downloaded as a consequence of its original installation.

•Cons:

○ Requires monthly per-device fee

○ Requires more effort to set up

SOURCES:

HTTPS://WWW.ASSURITYRIVER.COM/RESOURCES/BLOG/MOBILE-DEVICE-MANAGEMENT

HTTP://WWW.MICROSOFT.COM/EN-US/LEGAL/INTELLECTUALPROPERTY/IPLICENSING PROGRAMS/EXCHANGEACTIVESYNCPROTOCOL.ASPX

HTTP://TECHNET.MICROSOFT.COM/EN-US/EXCHANGE/BB288524.ASPX

CHRISTOPHER BERRY, MOBI BDR & MDM SPECIALIST

To see how MOBI can help you manage mobility,or to learn more visit:

www.mobiwm.com/demorequest