Managing Enterprise End-Point Devices

Abstract

Enterprise systems have traditionally managed network security with firewalls, virtual private networks (VPNs), antivirus software, and computers imaged and deployed from within the enterprise system. This implies a fortress model, in which a clear boundary lies between what is inside the fortress and what is outside. Those assets inside are protected from the outside. This model does not match the current world. Mobile devices, which are outside the traditional fortress, are now a part of everyday life and thus a part of everyday business. Such devices are not add-ons to a managed core but instead are part of the core of the enterprise. A modern enterprise depends on collaboration and communication across devices regardless of platform, and security requires all devices to be registered and managed with mobility in mind. End-point device management is the process by which enterprise hardware and the software that runs on it are managed, updated, validated, and approved by the enterprise. Information about users, including which end-point device they are logged into, their geo-location, and other factors, are maintained within the enterprise. These are made available for maintenance and update, as well as access and privilege determination, restriction, and elimination. Rogue and compromised devices (and individuals) are removed from the registry and prevented from interacting with enterprise services. This enables the enterprise to tightly control the security properties of not just the connections to the services but also the end-point devices where these communications originate.