Black Box Version 1.0 Manual de usuario descargar pdf (Pagina 4)

New in iOS 5

• Restrictions:

–Force password for all iTunes purchases

–Restrict Siri, iCloud backup / sync / photo stream

–Restrict diagnostic data, reject untrusted SSL

• Mail:

–Restrict moving email between accounts

–Use account in Mail.app only (no 3rd party apps)

Over-the Air Delivery

• No USB connection necessary

–No need to push a cart thru the building

–Can use simple web links to download profile

• More secure OTA method

–Documented by Apple

–Uses SCEP to establish secure exchange

–Not easy to implement

• Apple suggests MS or Cisco SCEP servers

• Still need user to visit link and install profile

Not many features were added in iOS5 as far as restrictions / controls.

Here are some of the more interesting ones.

In particular, the enhancements to Mail controls are interesting: Now

you can prevent a user from dragging an email out of a corporate

account and into a personal one (they can still, obviously, forward the

email). You can also restrict use of an account to the Mail app only,

which prevents other applications from forwarding data out through that

account.

Of course, creating the standardized proﬁle is only half the problem. For

a large enterprise, the prospect of pushing a cart through the building

and manually connecting each device via USB to load up current

proﬁles is...well...pretty much a non-starter.

Distributing them through an online link is much better, but that still has

some concerns (such as controlling access to the proﬁles, etc.). Some

of these concerns are addressed in a more formal Over-the-Air system,

as documented by Apple. This approach is more secure (using on-the-

ﬂy exchanges of certiﬁcates via Simple Certiﬁcate Exchange Protocol,

for one), but because of the use of SCEP, its complexity level is pretty

high.

And in either case, you still need for the end user to actively visit a link

and install the proﬁle. And if they know the proﬁle is going to disable

YouTube, how many do you think will willingly click on it?

1 2 3 4 5 6 7 8 9 ... 30 31

Sin comentarios

Black Box Version 1.0 Manual de usuario Pagina 4