topic Re: Harmony Mobile BYOD exchange enforcement in Mobile

Harmony Mobile BYOD exchange enforcement

Kronos — Wed, 13 Apr 2022 08:47:15 GMT

Looking at integrating Harmony Mobile product to a Azure AD and using the risk profiles created by the HM product to prevent access to exchange servers from mobile devices that are above a certain risk threshold.

Main intent is to provide BYOD users access to exchange and block if their device is displaying any security risk flags. I know the easy answer is to integrate with an MDM solution but this cant be done on BYOD devices.

Has anyone had any experience of this or the joys of cyber essentials plus assessments.

Many thanks for your help.

Re: Harmony Mobile BYOD exchange enforcement

Chris_Atkinson — Mon, 25 Apr 2022 15:16:29 GMT

Have you experimented with Conditional Access settings for "High" risk devices?

Go to Policy > select Policy Profile > On-device Network Protection > Content Inspection > Conditional Access

Re: Harmony Mobile BYOD exchange enforcement

Kronos — Mon, 25 Apr 2022 16:33:14 GMT

Thank you

I am now getting the following alert on the mobile.

Screen shot from my admin portal attached below but i can still access my corporate outlook from my device.

Re: Harmony Mobile BYOD exchange enforcement

Chris_Atkinson — Mon, 25 Apr 2022 23:47:50 GMT

Unfortunately the screenshot doesn't show in what way On-device Network Protection (ONP) is currently enabled?

It's located just above the portion of the screen captured...

Also depending upon if HTTPs inspection is used you may need to specify the corresponding IP addresses.

Re: Harmony Mobile BYOD exchange enforcement

the_rock — Mon, 25 Apr 2022 23:27:27 GMT

I believe admin guide indicates that conditional access is only for blocking access to domains if you connect to rogue wifi.

Re: Harmony Mobile BYOD exchange enforcement

Chris_Atkinson — Mon, 25 Apr 2022 23:53:05 GMT

Don't believe so, can you please share the reference to this ?

(Rogue WiFi is certainly a trigger for a change in device risk however.)

Re: Harmony Mobile BYOD exchange enforcement

the_rock — Mon, 25 Apr 2022 23:38:40 GMT

https://downloads.checkpoint.com/fileserver/SOURCE/direct/ID/108826/FILE/CP_Harmony_Mobile_AdminGuide.pdf

Re: Harmony Mobile BYOD exchange enforcement

Chris_Atkinson — Mon, 25 Apr 2022 23:47:12 GMT

Thanks Im aware of the documentation location, but I cannot see the linkage between rogue wifi and conditional access therein

Re: Harmony Mobile BYOD exchange enforcement

the_rock — Mon, 25 Apr 2022 23:48:38 GMT

O, sorry, thats what we were told via TAC case when asking about rogue wi-fi / conditional access.

Re: Harmony Mobile BYOD exchange enforcement

the_rock — Mon, 25 Apr 2022 23:59:11 GMT

Unless I misunderstood something about it...reading the guide again, it would seem its more related to blocking access regardless of rogue wi-fi...