{"id":770,"date":"2010-06-10T14:47:22","date_gmt":"2010-06-10T14:47:22","guid":{"rendered":"http:\/\/refraction.co.uk\/blog\/?p=770"},"modified":"2010-06-17T22:10:01","modified_gmt":"2010-06-17T22:10:01","slug":"iphone-4-in-business","status":"publish","type":"post","link":"https:\/\/refraction.co.uk\/blog\/2010\/06\/10\/iphone-4-in-business\/","title":{"rendered":"iPhone 4 in business"},"content":{"rendered":"<p>With the iPhone rapidly becoming an accepted business\u00a0phone for many companies, I\u2019ve been interested to read about the changes that the forthcoming iPhone 4 and iOS 4 will bring.<\/p>\n<p>To be honest there isn\u2019t a huge amount of info out there, but the info that is available is quite positive.\u00a0 There\u2019s a page on <a title=\"iPhone OS business preview\" href=\"http:\/\/www.apple.com\/iphone\/business\/preview-iphone-os\/\" target=\"_blank\">apple.com<\/a> with some basic details.\u00a0 The main areas that Apple seem to be addressing are security and management, both of which have been question marks in the past.\u00a0 Specifically the talk about:<\/p>\n<blockquote>\n<p>Data Protection <br \/>Security enhancements in iPhone OS 4 protect email messages and attachments stored on iPhone 3GS by using the device passcode as an encryption key. New data protection APIs can be used for custom and commercial apps so that business-critical information is protected even if a device is compromised.<\/p>\n<\/blockquote>\n<p>This is good news, but I still think Apple need to be clearer about exactly what sort of encryption is used etc.\u00a0 The 3GS\u2019s are meant to be encrypted, but there\u2019s pretty strong indications that this isn\u2019t quite as strong as you would hope [<a title=\"iphone business security framework\" href=\"http:\/\/marienfeldt.wordpress.com\/2010\/03\/22\/iphone-business-security-framework\/\" target=\"_blank\">1<\/a>, <a href=\"http:\/\/www.wired.com\/gadgetlab\/2009\/07\/iphone-encryption\/\" target=\"_blank\">2<\/a>, <a href=\"http:\/\/arstechnica.com\/apple\/news\/2009\/07\/new-iphone-hardware-encryption-not-even-close-to-hack-proof.ars\" target=\"_blank\">3<\/a>].\u00a0 If Apple can get this right it\u2019ll open a lot of doors from them in business, as they&#8217;re still some way behind RIM&#8217;s Blackberry and Microsoft&#8217;s Windows Phone platforms.\u00a0\u00a0 Both of these offer significantly more control over encryption, and in combination with device management tools can both be configured to accredited security levels (up to &#8216;RESTRICTED&#8217; I believe).<\/p>\n<blockquote>\n<p>Mobile Device Management <br \/>Deploying and managing large iPhone fleets will be even easier with iPhone OS 4. New Mobile Device Management APIs can be integrated with third-party solutions to wirelessly configure and update settings, monitor compliance with corporate policies, and even wipe or lock managed iPhone devices.<\/p>\n<\/blockquote>\n<p>To their credit Apple have supported a level of device management for a while through their implementation of Microsoft&#8217;s ActiveSync.\u00a0 This at least allows basic policy enforcement on devices connecting in through Exchange.\u00a0 By providing more complete API\u2019s into a management interface however hopefully iPhones will begin to support a much wider range of management features.\u00a0 The obvious gaps currently are around password\/pin polices, encryption and granular control of features and functionality.\u00a0 There are a number of products in the market to manage mobile devices [<a href=\"http:\/\/en.wikipedia.org\/wiki\/Mobile_device_management\" target=\"_blank\">1<\/a>, <a href=\"http:\/\/www.b2m-solutions.com\/\" target=\"_blank\">2<\/a>, <a href=\"http:\/\/www.microsoft.com\/windowsmobile\/en-us\/business\/solutions\/enterprise\/mobile-device-manager.mspx\" target=\"_blank\">3<\/a>], so hopefully we\u2019ll see these begin to support the iPhone as well.<\/p>\n<blockquote>\n<p>Wireless App Distribution <br \/>iPhone OS 4 enables enterprises to securely host and wirelessly distribute in-house apps to employees over Wi-Fi and 3G. Apps can be updated without requiring users to connect to their computers.<\/p>\n<\/blockquote>\n<p>This has the potential to unlock the iPhone\/iPad to a new group of developers.\u00a0 Previously it\u2019s been quite tricky to develop in house Line of Business applications, \u00a0and critically, to distribute them out to a fleet of devices.\u00a0 The ability to deploy in-house apps over the air will make this much more attractive to organisations.\u00a0<\/p>\n<blockquote>\n<p>SSL VPN Support <br \/>SSL VPN support in iPhone OS 4 gives users another way to securely access enterprise resources. These new protocols can even be leveraged to connect seamlessly to a corporate network via VPN on Demand. Forthcoming apps from Juniper and Cisco will support SSL VPN on iPhone.<\/p>\n<\/blockquote>\n<p>VPN support is obviously a nice thing to have, but I\u2019d be interested to hear how often this is used.\u00a0 In a world where you\u2019re developing and using internal applications it\u2019ll be a very useful tool if those aren&#8217;t published to the internet, but for basic email etc generally the existing ActiveSync connection probably offers enough transport security.\u00a0 I guess web access policies could also influence the use of VPN\u2019s if you wanted to force your users through a company proxy server of some sort.<\/p>\n<blockquote>\n<p>Improved Mail <br \/>iPhone OS 4 allows users to set up multiple Exchange ActiveSync accounts and now works with Exchange Server 2010. With the new unified inbox feature, users can see messages from all their email accounts conveniently displayed in a single inbox, or they can quickly switch between inboxes to see messages from any single account. If users receive an attachment that they want to save or edit, Mail now lets you open attachments with compatible apps from the App Store.<\/p>\n<\/blockquote>\n<p>Again, I think the mail changes are more \u2018nice to haves\u2019 rather than significant improvements to the business features.\u00a0 Though the unified inbox is very well implemented when you see it in use.\u00a0 With the support for multiple ActiveSync accounts, it will be interesting to see how they have implemented the policy management.\u00a0 If you have two ActiveSync connections, each with difference policy enforcement settings, which one wins?\u00a0 Is it whichever is more secure?\u00a0 If so who decided what the more secure value is?\u00a0 I also wonder if this could potentially allow information to leak from one system to another.\u00a0 If mail is synced from one company onto the iPhone, could it then potentially be synced back down to a separate mailbox with the iPhone acting as a hub?\u00a0 I can see how that might be useful for personal contacts, but for potentially sensitive emails etc, it could be a problem.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>With the iPhone rapidly becoming an accepted business tool for many companies, I\u2019ve been interested to read about the changes that the forthcoming iPhone 4 and iOS 4 will bring.<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[6],"tags":[129,31,35,106,413,412,121,119,141],"class_list":["post-770","post","type-post","status-publish","format-standard","hentry","category-tech","tag-activesync","tag-apple","tag-enterprise","tag-exchange","tag-ios","tag-ipad","tag-iphone","tag-management","tag-security","entry"],"_links":{"self":[{"href":"https:\/\/refraction.co.uk\/blog\/wp-json\/wp\/v2\/posts\/770","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/refraction.co.uk\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/refraction.co.uk\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/refraction.co.uk\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/refraction.co.uk\/blog\/wp-json\/wp\/v2\/comments?post=770"}],"version-history":[{"count":2,"href":"https:\/\/refraction.co.uk\/blog\/wp-json\/wp\/v2\/posts\/770\/revisions"}],"predecessor-version":[{"id":813,"href":"https:\/\/refraction.co.uk\/blog\/wp-json\/wp\/v2\/posts\/770\/revisions\/813"}],"wp:attachment":[{"href":"https:\/\/refraction.co.uk\/blog\/wp-json\/wp\/v2\/media?parent=770"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/refraction.co.uk\/blog\/wp-json\/wp\/v2\/categories?post=770"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/refraction.co.uk\/blog\/wp-json\/wp\/v2\/tags?post=770"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}