FAQ: Which MDM's and MAM's can SBM support?

[Phillip_Woon]

Currently Supported:

• Airwatch
• MobileIron Core
• BlackBerry Enterprise Server
• IBM Maas360
• Good Dynamics (or BlackBerry Dynamics as its now called)

Support pending:

• MS Intune
• Citrix ZenMobile

If you have a customer what really wants to buy the best mobile security on the market (ours of course) but needs to deploy with an MDM not mentioned above, there are a few things to consider:

• If they are using just Android, the customer can distribute and manage the app via the Google playstore using the unsupported MDM, yet enroll via emails sent from SBM (using the registration code / QR in the email) with a list of devices imported into SBM from a CSV (your local mobile overlay can supply an example of this CSV formatting)
• If they are also using iOS, the customer can request a copy of the apple IPA package for the SBM agent and distribute with the MDM. The Appstore version will not work unless you enable unsupported MDM mode in the settings of SBM (this will however disable app protection due to a profile conflict, so is a last resort). A CSV of these apple devices will still need to be imported into SBM and an enrollment email sent as there is no MDM connection to collect the device list / sync devices.
• Lastly if there is a big deal on the table that requires us to work with an unsupported MDM in order to win the business, please inform the mobile overlay for your region ASAP!

[Daniel_Dor]

Great post by Phillip Woon​!

Just to add, here is the list of the different capabilites of the different applications in each one of the mentioned applications:

What MDM we have on the  Device?
Category	Capability	Enabled in "None" Configuration?	Enabled in "Airwatch" Configuration?	Enabled in "MobileIron" Configuration?	Enabled in "MaaS360" Configuration?	Enabled in "BES" Configuration?	Enabled in "Non Supported MDM" Configuration?
Provisioning	Get device list from MDM	X	V	V	V	V	X
Provisioning	Get labels/group from MDM	X	V	V	V	V	X
Deployment	Auto deploy iOS (push registration details to device automatically)	X	V	V	V	X	X
Deployment	Auto deploy Android (push registration details to device automatically)	X	V	X (Roadmap)	X	X	X
Detection - iOS App Store App	Get app list iOS	V	V	V	V	X	X
Detection - iOS App Store App	Get network profile (Can be used to blacklist profiles)	V	X	X (Roadmap)	X	X	X
Detection - iOS App Store App	Get Provisioning profile (Can be used to detect 3rd party apps)	V	X	X (Roadmap)	X	X	X
Detection - iOS App Store App	Infected apps detection (Get app list iOS)	V	V	V	V	X	X
Detection - iOS App Store App	MiTM detection capability (on device detection)	V	V	V	V	X	V
Detection - iOS App Store App	Device vulnerabilites detection (We test several things on the device)	V	V	V	V	X	V
Detection - iOS Enterprise App	Get app list iOS	V	V	V	V	V	V
Detection - iOS Enterprise App	Get network profile (Can be used to blacklist profiles)	V	V	V	V	V	V
Detection - iOS Enterprise App	Get Provisioning profile (Can be used to detect 3rd party apps)	V	V	V	V	V	V
Detection - iOS Enterprise App	Infected apps detection (Get app list iOS)	V	V	V	V	V	V
Detection - iOS Enterprise App	MiTM detection capability (on device detection)	V	V	V	V	V	V
Detection - iOS Enterprise App	Device vulnerabilites detection (We test several things on the device)	V	V	V	V	V	V
Detection - Android	Infected apps detection	V	V	V	V	V	V
Detection - Android	MiTM detection capability (on device detection)	V	V	V	V	V	V
Detection - Android	Device vulnerabilites detection (We test several things on the device)	V	V	V	V	V	V
Mitigation	Mitigation	X	V	V	V	v	X
UDM	UDM	X	V	V	X	X	X

[Sergej_Gurenko]

Great FAQ. Can you please update to reflect recent recent Intune addition.

[Vladimir_Yakovl]

Can we have a link to the updated list of supported MDM solutions? I am curious if anyone encountered SBM with Meraki MDM.

[MikeB]

Does anyone know if it is possible to make some kind of integration with MERAKI MDM?

[Chris_Atkinson]

Would suggest contacting your local Check Point SE to discuss an RFE if this is important to you.

Installation along side Meraki MDM should be possible but you may have to disable the MDIS profile per sk171709.

[Yuval_Sered]

Meraki MDM integration is not supported OOTB - if you have a customer that justify such enhancement please work with your CP rep to issue a product RFE. Another option is to contact MERAKI and have them adjust to the Harmony Mobile API for generic MDM integration. Also please note that you can still use the HM protection with the MDM without integrating it (just disable the MDIS profile in iOS as suggested in the SK below👇