iPass Endpoint Policy Managment
- Simplify system updates and software distribution for mobile devices to help reduce administration costs
- Apply intelligent vulnerability assessment and targeted patch deployment to enable remote-device security
- Enforce endpoint management and security policy to help safeguard your business
- Manage endpoint devices without inconveniencing users to enable improved mobile worker productivity
- Implement flexibly—enterprise-hosted and online iPass-hosted options available
Traditional desktop management and patch tools are great for controlling an enterprise's desk-bound PCs. Unfortunately, they're not much help for remotely managing mobile devices that only sporadically attach to the corporate network. That's a real problem, as these remote systems often are the most difficult to manage—they miss out on timely patches and anti-virus updates and pose the greatest risk to your network.
The Endpoint Policy Management service from iPass is uniquely designed to address the challenges facing mobile systems management. Endpoint Policy Management helps enterprises discover, inventory, assess, and update remote and mobile devices. Compatible with leading enterprise systems management platforms, Endpoint Policy Management helps protect mobile devices from the dangers of the Internet to strengthen your existing network protection tools.
Inventory assessment
When a remote user tries to connect, Endpoint Policy Management immediately inventories their devices hardware and software, including Windows configuration and anti-virus software. It then runs a security assessment before giving the mobile user an Internet connection.
Automated Remediation
After assessing the endpoint device, Endpoint Policy Management automatically remediates Microsoft® OS patches and anti-virus definition files based on your security policies and priority levels.
Patch management and anti-virus updates
Each time a Microsoft OS patch is released, it's immediately available through Endpoint Policy Management. For anti-virus updates, IT staff define how recent a user's definition files must be and Endpoint Policy Management takes care of it.
Mobile software distribution
Systems management and enforcement of corporate policy for mobile devices has never been easier. Count on the solution's smart, flexible package editor to script and compile updates as needed, based on your specific needs. Schedule, customize and automate the process of updating the resources on remote computers with Endpoint Policy Management.
In addition, Endpoint Policy Management offers:
Architected for scalability and flexible implementation, Endpoint Policy Management can be hosted on redundant servers within iPass Secure Data Centres or at your network operations centre—you choose what works best for your organization.
- Endpoint Policy Management—Online
Let iPass simplify mobile systems management, assessment, remediation and patching for your distributed workforce by hosting the Endpoint Policy Management service. You get all the benefits of the service with the ability to control and customize your policies via a Web console and avoid the overhead of deploying and maintaining new infrastructure.
- Endpoint Policy Management Enterprise
Integrated with your existing infrastructure, Endpoint Policy Management can be run "out of the box" or customized to meet your company's unique needs. Active Directory integration lets you leverage your existing user groups to set policies, so you get all the benefits of the service without managing an additional user database.
Optimized User Experience
The Endpoint Policy Management service was specifically designed for the mobile environment and includes these intelligent features to simplify systems management while minimize the impact on mobile workers:
- Dynamic bandwidth throttling
Leveraging quality-of-service capabilities within the iPass global virtual network, dynamic bandwidth throttling automatically allows applications to use the bandwidth they need, while performing downloads in burst mode when applications are idle. This keeps users fully productive during remediation.
Balance management and productivity by defining an update as high priority or normal priority and whether a high-speed connection is required.
Users can continue a download at the point where they left off during a previous session. Regardless of session duration or connection quality, rest assured that updates will be delivered without inconveniencing the user, even if multiple sessions are required.
Customized Control Without the Overhead
With the Endpoint Policy Management service, your IT administrator gets the flexibility to manage patches, track inventory and review what’s installed on each end-user device through an intuitive console—protecting not only remote machines but the entire enterprise network as well:
A great way to balance security and productivity. IT staff can define an update as high priority or normal priority and determine whether it should only execute over a high-speed connection (anything over 128 Kbps).
IT staff can target update packages to just those users and groups of users who actually require them—based on appropriate OS, software, anti-virus update history and machine type.
- Automatic dependency verification
Compare dependencies for each OS and anti-virus update with the status of each endpoint device and assembles a customized update package—greatly simplifying the patch management process
Integrated Connectivity and Systems Management
Customers of iPass connectivity services can combine Endpoint Policy Management's capabilities with the iPassConnect™ universal client, allowing enforced remediation of critical endpoint OS and software updates before launching the VPN client. This protects the enterprise by granting VPN access to only those systems that meet your established policies.
Moreover, iPassConnect integration balances security with productivity. IT Managers can distribute high-priority patches as a required part of the initial Internet connection while normal priority updates occur in the background during the user session.
|
