topic FAQ: Which MDM's and MAM's can SBM support? in Mobile

FAQ: Which MDM's and MAM's can SBM support?

Phillip_Woon — Sat, 13 May 2017 14:53:25 GMT

Currently Supported:

Airwatch
MobileIron Core
BlackBerry Enterprise Server
IBM Maas360
Good Dynamics (or BlackBerry Dynamics as its now called)

Support pending:

MS Intune
Citrix ZenMobile

If you have a customer what really wants to buy the best mobile security on the market (ours of course) but needs to deploy with an MDM not mentioned above, there are a few things to consider:

If they are using just Android, the customer can distribute and manage the app via the Google playstore using the unsupported MDM, yet enroll via emails sent from SBM (using the registration code / QR in the email) with a list of devices imported into SBM from a CSV (your local mobile overlay can supply an example of this CSV formatting)
If they are also using iOS, the customer can request a copy of the apple IPA package for the SBM agent and distribute with the MDM. The Appstore version will not work unless you enable unsupported MDM mode in the settings of SBM (this will however disable app protection due to a profile conflict, so is a last resort). A CSV of these apple devices will still need to be imported into SBM and an enrollment email sent as there is no MDM connection to collect the device list / sync devices.
Lastly if there is a big deal on the table that requires us to work with an unsupported MDM in order to win the business, please inform the mobile overlay for your region ASAP!

Re: FAQ: Which MDM's and MAM's can SBM support?

Daniel_Dor — Sun, 14 May 2017 07:46:57 GMT

Great post by Phillip Woon!

Just to add, here is the list of the different capabilites of the different applications in each one of the mentioned applications:

What MDM we have on the Device?
Category	Capability	Enabled in "None" Configuration?	Enabled in "Airwatch" Configuration?	Enabled in "MobileIron" Configuration?	Enabled in "MaaS360" Configuration?	Enabled in "BES" Configuration?	Enabled in "Non Supported MDM" Configuration?
Provisioning	Get device list from MDM	X	V	V	V	V	X
Provisioning	Get labels/group from MDM	X	V	V	V	V	X
Deployment	Auto deploy iOS (push registration details to device automatically)	X	V	V	V	X	X
Deployment	Auto deploy Android (push registration details to device automatically)	X	V	X (Roadmap)	X	X	X
Detection - iOS App Store App	Get app list iOS	V	V	V	V	X	X
Detection - iOS App Store App	Get network profile (Can be used to blacklist profiles)	V	X	X (Roadmap)	X	X	X
Detection - iOS App Store App	Get Provisioning profile (Can be used to detect 3rd party apps)	V	X	X (Roadmap)	X	X	X
Detection - iOS App Store App	Infected apps detection (Get app list iOS)	V	V	V	V	X	X
Detection - iOS App Store App	MiTM detection capability (on device detection)	V	V	V	V	X	V
Detection - iOS App Store App	Device vulnerabilites detection (We test several things on the device)	V	V	V	V	X	V
Detection - iOS Enterprise App	Get app list iOS	V	V	V	V	V	V
Detection - iOS Enterprise App	Get network profile (Can be used to blacklist profiles)	V	V	V	V	V	V
Detection - iOS Enterprise App	Get Provisioning profile (Can be used to detect 3rd party apps)	V	V	V	V	V	V
Detection - iOS Enterprise App	Infected apps detection (Get app list iOS)	V	V	V	V	V	V
Detection - iOS Enterprise App	MiTM detection capability (on device detection)	V	V	V	V	V	V
Detection - iOS Enterprise App	Device vulnerabilites detection (We test several things on the device)	V	V	V	V	V	V
Detection - Android	Infected apps detection	V	V	V	V	V	V
Detection - Android	MiTM detection capability (on device detection)	V	V	V	V	V	V
Detection - Android	Device vulnerabilites detection (We test several things on the device)	V	V	V	V	V	V
Mitigation	Mitigation	X	V	V	V	v	X
UDM	UDM	X	V	V	X	X	X

Re: FAQ: Which MDM's and MAM's can SBM support?

Sergej_Gurenko — Mon, 09 Oct 2017 21:04:13 GMT

Great FAQ. Can you please update to reflect recent recent Intune addition.

Re: FAQ: Which MDM's and MAM's can SBM support?

Vladimir_Yakovl — Mon, 22 Oct 2018 19:00:22 GMT

Can we have a link to the updated list of supported MDM solutions? I am curious if anyone encountered SBM with Meraki MDM.

Re: FAQ: Which MDM's and MAM's can SBM support?

MikeB — Mon, 22 Aug 2022 15:48:37 GMT

Does anyone know if it is possible to make some kind of integration with MERAKI MDM?

Re: FAQ: Which MDM's and MAM's can SBM support?

Chris_Atkinson — Tue, 23 Aug 2022 01:35:14 GMT

Would suggest contacting your local Check Point SE to discuss an RFE if this is important to you.

Installation along side Meraki MDM should be possible but you may have to disable the MDIS profile per sk171709.

Re: FAQ: Which MDM's and MAM's can SBM support?

Yuval_Sered — Sun, 04 Sep 2022 15:56:40 GMT

Meraki MDM integration is not supported OOTB - if you have a customer that justify such enhancement please work with your CP rep to issue a product RFE. Another option is to contact MERAKI and have them adjust to the Harmony Mobile API for generic MDM integration. Also please note that you can still use the HM protection with the MDM without integrating it (just disable the MDIS profile in iOS as suggested in the SK below👇