Aruba ClearPass with WorkSpace
Secure, distribute and manage enterprise apps on mobile devices

Overview:

ClearPass with WorkSpace lets IT secure, distribute and manage enterprise apps on personal mobile devices. It also includes the WorkSpace mobile app, which lets users onboard their own devices, organize and manage their work apps, and provision network access for their guests.

For IT, WorkSpace makes it easy to create policies that control how work apps are used and data is secured. An automatic VPN session can be initiated when specific work apps are used on public networks. Work apps can also be locked based on a location or geo-tracking status.

For users, the WorkSpace mobile app offers unprecedented control, including visibility into app policy status, access to an enterprise app store, and a single sign-on for work apps. This control extends to as many personal devices the user is allowed to bring onto the network.

The WorkSpace mobile app also lets users create and manage temporary guest Wi-Fi accounts. Instead of having IT or the reception desk provision guest access for everyone, WorkSpace empowers employees to manage Wi-Fi access for their own guests. WorkSpace supports one of the largest ecosystems of enterprise mobile apps in the industry. IT can easily secure, distribute and manage more than 40 leading third-party enterprise productivity apps as well as internally-developed apps.

Application Management

The easiest way to secure, distribute and manage enterprise apps for BYOD

The Aruba WorkSpace capability in ClearPass lets IT secure, distribute and manage enterprise apps on mobile devices. A companion WorkSpace mobile app enforces policies, encrypts data and provides a single sign-on for all work apps.

WorkSpace supports one of the largest ecosystems of enterprise mobile apps in the industry. IT can easily secure, distribute and manage more than 40 leading third-party enterprise productivity apps as well as internally-developed apps.

We have your apps covered

Protect apps and data on personal and IT-issued devices. There’s no need to manually distribute new software – WorkSpace pushes out and updates enterprise apps automatically. To ensure security, enterprise data is encrypted on the device and across the network.

Take control of your data

Add security and policies based on contextual data such as user role, location, motion, and time of day. Easily add Active Directory authentication to apps, lockdown apps on jailbroken devices or based on location, and prevent cut-and-paste between apps.

Make your apps network-fluent

Extend the existing enterprise network policy system to apps and make them network-fluent. Work apps are given higher priority across the network and application-specific VPNs are initiated to encrypt traffic when connecting to a public network.

No more big brother

WorkSpace eliminates corporate liability issues by preventing IT access to a user’s personal information. IT can only wipe enterprise apps and data – anything controlled by WorkSpace – while personal information remains untouched.

Personal BYOD App

The only mobile app that personalizes the BYOD experience

The Aruba WorkSpace mobile app delivers a unique set of ClearPass capabilities to end users, giving them unprecedented control to personalize their BYOD experience and reduce the demands on IT resources.

When the WorkSpace app is pushed out to a mobile device, everything work-related is setup automatically and personalized based on the user’s identity and device type without helpdesk assistance.

Through a personalized portal, users can then access and manage their work apps, share AirPrint and AirPlay devices with other users and groups, manage all their onboarded devices, and provision guest Wi-Fi accounts.

All your work apps in one place

IT can push a customized work environment to each mobile device, where work apps are organized and available through a single sign-on. Users can view the policy status of their work apps and can download optional productivity apps from an enterprise app store.

Protect what’s yours

The WorkSpace mobile app and its contents are always encrypted on the device and over the network. IT can also prevent data leakage by limiting cut-and-paste between apps, restricting cloud backups, and restricting active directory authentication.

Master of your devices

Users can onboard new mobile devices, register printers and projectors, and manage the sharing relationships of AirPrint- and AirPlay-capable devices. This control extends to as many personal devices the user is allowed to bring onto the network.

The guests have arrived

Users can create and manage temporary Wi-Fi accounts. Instead of requiring IT or the reception desk provision guest access for everyone, the WorkSpace mobile app empowers employees to manage network access for their own guests.

Features:

• App, device and network policies in one system.
• IT has total control over enterprise apps and data, while a user's personal information stays private.
• Companion WorkSpace mobile app lets users control their inventory of apps, devices and endpoints.
• Automated distribution of apps tied to a user's roles and device.
• Per-application VPNs and data encryption on the device.
• Built-in remote wipe/lock, cut-and-paste protection, jailbreak detection, geo-fencing, and time/motion policies.
• Supports scores of third-party apps, including content sharing, collaboration and productivity apps.

Capabilities:

Familiar device, custom enterprise workspace
The WorkSpace mobile app for work and school uses standard login credentials and protocols, and the existing certificate infrastructure to connect to the data center.

The WorkSpace mobile app then automatically downloads and provisions the mobile device with approved enterprise apps. No IT intervention is required. Key user advantages include:

• Allows users to easily manage their enterprise apps.
• Familiar springboard and app store model ensures users get started fast.
• Single sign-on for all enterprise apps keeps it simple, yet secure.

Personal data stays private
WorkSpace eliminates corporate liability issues related to privacy by preventing IT access to a user's personal information. IT can only wipe or lock enterprise apps and data – anything controlled by WorkSpace – while personal information stays private.

Your own app store
ClearPass with WorkSpace even gives IT a vehicle to distribute and manage corporate-approved apps from an internal app store. A user's role and responsibilities determine which apps are automatically pushed to the device. IT can also track which enterprise apps are being used and quickly make updates to any app without touching a user's device.

• World's leading third-party apps are available for distribution through ClearPass with WorkSpace, including browser and email applications.
• Enterprise security features such as VPN and data encryption is automatically added to internally developed apps distributed through ClearPass with WorkSpace.
• Intuitive administrative workflow makes it easy to distribute new and updated apps, without user intervention.

Data security tailored for mobile devices
Granular policy controls and automatic updates lets IT apply policy changes per app without the need to redeploy or rewrap apps already on the devices. Policy controls include:

• Per-application enforcement based on contextual information such as time, location and motion.
• Per-application VPN, data wipe and lock features.
• Control over app capabilities such as document sharing, cloudbackup, offline use and copy-paste.

Compliance and reporting
Mobile devices whose enterprise apps are managed by ClearPass WorkSpace are viewed through comprehensive administrative and operational screens. In addition, the administrative interface features a simple point-and-click model to customize actions and reports.

Supported Device Platforms

• Apple iOS 5.0 and 6.0
• Android 4.0 and above

Deployment:

Documentation:

Aruba ClearPass with WorkSpace Datasheet (.PDF)