The Natural way for Secure Mobile Email

v.1.4

www.AGATSolutions.com

Slide 2

ActiveSync Shield overviewSecure Mobile Email solution for over the air connecting

device to Exchange.Server side solution with no client install requirementsNatural Bring Your Own Device (BYOD) solution

Compatible with any mobile device -iOS (iPhone, iPad), Android, Windows Phone, Nokia etc.

Uses favorite device's familiar native mail client.Low enrollment and implementation costs

Slide 3

Security issues addressed• DLP-Data Leak Prevention- Content protection• Mobile Access Control- Two Factor AuthenticationActive Directory protection- Network security• Antivirus scanning- Malware protection

• Available either as an add-on to the Microsoft Forefront security server family (ISA/TMG/IAG/UAG) or with a proprietary pluggable Reverse Proxy platform (Bastion).

Slide 4

Main featuresActiveSync Protocol filtering – manage content syncingTwo Factor AuthenticationWebmail - DLP solutionContent inspection and manipulation

Virus inspectionAttachment encryption

Self registration & admin enrollment/ auditing site

Slide 5

Content filtering featuresManage dynamic content filtering rules by:

AD group membershipDevice type (iPhone, android..)Device mail client (such as Touchdown)

Regular expression rules Manage rules priority orderEach rule can hold different content policy

Minimize content leaving network to minimum required and to necessary users.

Slide 6

Content filtering features (cont.)

Filter all Exchange objects:MailAttachmentsEventsTasksContacts.

Slide 7

Content filter features (cont.)

Filter attachments in mail and calendar eventsManage a list of permitted attachment file typesAllow specific file types per ruleFilter by words in subject and body of mail and calendar

events Checks entire message body, even if client doesn’t initially

request full message

Slide 8

Content filter features (cont.)

Allow meeting requests to be received even when email is blocked

Filter by the sender's domain nameBlock internal mail leaking out

Filter by mail headers

Slide 9

Protector Basic - Architecture

Slide 10

Content inspection - Antivirus Check mail content by Anti Virus before reaching

Exchange and before reaching device via ICAP protocol

Slide 11

Content manipulation- Encryption serverStrip attachments out of messageSend to external encryption serverAttach files back into message

Encryption server

Exchange server

ActiveSync Protector

Mobile Device

Slide 12

DLP- ActiveSync WebmailUnique DLP solution avoids storing content on device by

converting email body to web displayUses native email clientContent immediately blocked in

case of stolen or lost deviceAttachments are converted to

linksNo remote wipe technical issues

and personal data issues

Slide 13

DLP- ActiveSync Webmail (cont)Mail content dynamically fetched upon request and not

stored on ActiveSync Shield gateway serverActive Directory password not stored on gatewayIntegrated with Mobile Access

Control filter for secure authenticationAccess control layer requiring web login

Authentication timeout can be configured.

Slide 14

Two Factor authenticationBased on Device ID sent by protocolAdditional device identification factor:

Solution places a unique key on device, which is verified with each sync

Several registration/ enrolment options to enforce access control policy based on matching phone and user.

Slide 15

Access Control – EnrollmentSupport several access control policies:

Automatic Registration – Device ID is registered upon first use of account.

Two steps registration process: Two Step Registration – User registers on internal site and

then must sync within a defined time frame to complete registration.

Admin Manual Enrollment – Admin management of user list using training mode and rejected auditing list.

Slide 16

Two Steps Registration

Slide 17

Access Portal admin View approved & blocked usersBlock specific usersProduct settings

Allow duplicate users per deviceTwo level admin- local domain adminReportsSearch

Slide 18

Admin user management

Slide 19

Active Directory ProtectionCustom Login– User creates credentials on internal site

for use on device instead of Active Directory credentials.Use cases:Avoid using internal credentials outside organizationAvoid storing and using Active Directory credentials on device.Active Directory password lockout protection.Solution for organizations using smart card login

Slide 20

Product componentsMobile Access ControlProtectorConsumerAccess PortalBastion reverse proxy

Slide 21

Two step registration Architecture

Slide 22

Custom Login/Webmail- Architecture

Slide 23

Bastion Reverse proxy forwarding traffic to the configured

backend serversPluggable filtering architectureFilters HTTP(S)Scalable Event-Driven ArchitectureCan publish multiple servers in parallel Highly efficient asynchronous architecture Bi-directional content filteringCross-platform

Slide 24

Bastion (cont) Geared towards full-featured HTTP filtering

Most reverse proxy solutions are geared towards web acceleration

Supports many HTTP features and scenariosChunked, gzip and deflate Transfer-Encodings.Pipelining

Supports filtering content, blocking content or generating proxy responses anytime during the filtering chain (unlike TMG and UAG, for instance).

Slide 25

AGAT Security suite - OverviewActiveSync Shield is part of AGAT Security suite.AGAT Security suite is a set of unique components that

allow extending Forefront (ISA/TMG IAG/UAG) functionality to solve complex architectures and requirements, typically implemented in large, complex and well secured networks.

To learn more about our solutions please visit our website at http://www.agatSolutions.com

Slide 26

END

www.SecureMobileEmail.com

See more products athttp://www.agatsolutions.com

info@agatsolutions.com