Sign Michigan Assignment of Partnership Interest Mobile

Document type sign assignment of partnership interest michigan mobile

I want to welcome everyone to the semantic mobile management presentation we're doing today this is for the new 7.1 release that just came out a couple weeks ago we're going to be talking about all new features and doing a demo so you can see everything that's going on with it so with that said this is what we'll be covering today I'll be talking about features at a high level and talking about different you know scenarios of how that plays into the real world will be talking about what's new in 7.1 you know the benefits of using it's over some of the other products and then we'll also be going through a live demo in our environment and I'll show you what it looks like on the client side with the agent and also what it looks like the console side on the server so I'm going to start off and talk a little bit about myself I'm on the endpoint management team here i TS I'm admin Licata and specialize in client management mobile management and virtualization recently mobile management has really taken off it's been getting a lot of interest you know especially with the 7.1 release with iOS support and so I've been leading that initiative on setting up demos whether they're on site or in the cloud and also creating on some training documentation to be used internally also authorized consultant access specialized endpoint management so a little bit about i TS we're both national and platinum partner a partner of the year for 2011 we focus on endpoint management and security solutions from Symantec we're based in Grand Rapids I'm based out of Cincinnati right now and we're engineer centric organization and what that means is you know we focus on the engineers that we sent out every week we share lob knowledge when they come back and you know we focus on getting excellent results and now let's transfer setting up you know good environments that kind of thing making sure you get everything you need so with that said there's a few different areas of mobile device management and so we're going to be focusing today on policy management but I'll briefly cover some of the other areas so policy management is going to include security policies compliance remediating devices making sure they meet your standards and your expectations when they're in your environment or even if they're not in your environment it's going to include managing the applications on those devices you know seen reports pushing software you know upgrades that kind of thing and also provisioning devices managing the configurations on them what's available it's not available getting them on the network getting on you know email etc but there's some other areas too that will cover you know a delay to presentation most of these centres around other security offerings so such as you know having like a managed pki for distributing certificates having the verisign VIP application which allows you to do kalica RSA securid token but instead of time your smartphone and which provides authentication for applications whether they're in house or not and other information protection side Symantec do p which is the data loss protection can also protect these devices when they're connected on your network and there's the pgp encryption solution for that and there's even the norton antivirus application that you can get from both the App Store and android market but today we're be focusing on policy management side and that's what molina mint is designed to address but we'll be talking more than just this one product we're going to be talking about the integration into other business processes other systems you have because this isn't just a standalone solution and that it can connect into other data sources they can connect into workflow to you know automate some of these processes to provide a you know a front-end for requests and it's it's going to be able to tie into your directory for authentication so that's one of the major strengths that we'll be covering today is integration into other systems so we're going to be focusing on iOS because that is the number one feature that's coming out of the 7.1 release we have we now have a native agent for both iPads iPhones to manage these devices mobile management 7.1 also has agents for windows mobile and also for blackberry and then this winter the Android agent will be coming out for those so specifically around iOS enterprise activation is referring to getting the agent on there and you know how do we manage it so we have a couple options with the agent how we get down there one option is to go through the app store and you can actually go out right now if you have an iPhone or iPad with you search for symantec and one of the first results you will get back is the Symantec mobile management agent and it's basically it's going to give you similar functionality to what an agent on a Windows or Mac machine would but it's going to be specific to you know your iPhone or iPad and that's publicly available however we have another option of getting that agent on there which is we allow you to build your own agent we basically give you kind of stripped-down source code and you can pile it in Xcode and what that allows you to do is you're not bound by by certain Apple restrictions like you would be if you got the agent from the app store so some of those restrictions would include for instance checking in from the background so if someone doesn't have their iPad or iPhone turn on the agent can still check in from the background if you're using that in-house agent if your invasion from the app store apple isn't going to allow the agent to do that because we have to play by their rules another benefit of using the in-house agent is that you can brand it you can see on the screen shot here we have like the IT s logo on the bottom of that but that could be your company's logo and so when I talk about the mobile library in a second that's going to become a more important to provide a more personalized experience for your end users so those are the two different options we have for the agent there's a lot of flexibility and how you get it installed so then a prize app store is one of the key features of this iOS offering and basically what allows you to do is to push and show applications in a library format on the device and so the idea is that the end user opens up the agent they see a list of applications they're offered that they can download and install these applications can either be from the public App Store or they can be from something you internally developed in-house that you uploaded you know your own files to and you want to distribute it internally so this is a distribution system for any kind of application for iOS devices a common question we get is you know you can a company or organization purchase licenses for their employees and then use mobile management to distribute those programs and the answer is yes I don't know if Apple has made it completely available to corporations yet but it's available on the academic side and it's called the valuing purchase program basically what you do is you go to apple apple site for that and you purchase certain number licenses they give you specific URL to use and you're able to put that URL into the console push it out to your users and then they're able to pull from that license ability purchased so I'll show you an example of where you'd put that address and what that looks like on the device once we get into the actual demo so the mobile library is kind of a sibling to the enterprise app store in that it allows you to push out content it's not just applications so it could be PDFs spreadsheets you know Word documents videos youtube videos whatever and it provides you know a single place for the end user to look in to find this content they can download it it'll store it locally it'll cash it so therefore if they don't have internet connection and they're on the plane then they can access that content and another feature that is that it's securely managed which I'll talk about the next slide so curly with the mobile library you can target content based on language of the device so you could say you know this is a set of English documents so it should only go to English devices this is a set of you know Spanish documents to ship it should only go to devices that are set to spanish in the future the next release we're expecting to be able to target specific groups of devices so you could say you know the marketing department will get this so documents on the sales force will get a separate set of documents so that's coming in in a new version and configuration management is obviously a big one that you know everyone requires which is you know how do you provision these devices how do you configure them for your environment you know what kind of configurations do force on what kind of configurations do net force and when I get into the demo I'll show some specific examples you know around like Wi-Fi sending up exchange accounts VPN profiles and that kind of thing so on the security and compliance side what we have is a list of options of how you want to restrict the device so you know the most common ones are setting a passcode you know setting the complexity of it setting the length of it when does it expire when is the device lock all that is configurable and you can have different sets of configurations and so you know you could have a highly restricted configuration that includes you know straw passcode short lockout period you know that they can't install external apps into the device you know something like that and then you can have another probe another set of configurations that's you know that is restrictive and you're able to target devices you know based on different criteria which I'll give you some examples of that later and so another big security feature is being able to you know do it wipe and we actually offer two different types of wipes which is you know racing the data off the device the first one the most common one is the complete wipe when you issue that remotely it basically does a factory reset of the device and they have to use itunes to connect to reactivate the device and all data is completely wiped from from the system now we have an option of selective wipe and where this comes in is for instance if you have a personal device on the network and you know that person is leaving your organization so you need to remove you know corporate content corporate data email etc without harming you know their 50 gig of music they legitimately purchased and and so the way you do that is any type of you know email account or content from the mobile library can be completely deleted remotely through selective wipe and the ideas that you're able to segregate this personal data from corporate data so that you know you can target just that corporate data to remove off that device so compliance enforcement is obviously very important because you know you can set up all these security policies but then you have to check to see you know no are they being enforced you know what actions would you take if the devices I in compliance with some of these policies so for instance you know jailbreak detection is a common one you may not allow jailbroken devices on your network or you may allow them but you may say you know you can connect a Wi-Fi but we're not going to allow you to have our VPN profile to connect to sensitive systems and so you can kind of pick and choose what policies apply to what devices based on different criteria like jailbreak detection you can check to see if encryption is turned on you can check to see if policies are enabled and then based on you know those different criteria you can only allow healthy devices on your network or can only allow them to do certain things out of network and certificate management this is very useful if you have any kind of PTI on site which is a public key infrastructure so if you manage your own certificates or if you use a managed PTI solution from verisign nap for Symantec you can push out certificates from here to devices so for instance some VPN profiles require certificates or even you know different Wi-Fi settings will require that you can provision those certificates maybe next version we're expecting to have integration with managed pki from Symantec so if you have pti on the cloud that will be available in future release so consolidated management what this is talking about is the platform itself and so all of these you know features i've been talking about are all built on the semantic management platform which is the same platform that all tiers built on so you know this system does not require altiris nor does all tiers require this but they're on the same platform so if you already have altars in your environment this is just another solution to install and the configure but you're not having you know a completely different set of servers being set up like most of the other products you would see for mobile management rather this is something that you can add on to your existing environment and so what that means is if you're already familiar with the reporting engine and how alerts are monitored and handled and all terrorists you're going to see a lot of similar functionality here so you're going to be able to create your own reports use built-in or canned reports on devices applications installed on them what users are assigned to them I'm able to collect alerts I send out emails you know based on you know these reports or triggers it's not specific on any or sorry it's not reliant on any specific mail system so if you don't have exchanged you're still going to be able to manage your iOS Windows Mobile you know BlackBerry devices just fine when we use exchange that comes into play for devices that we do not have an agent for so that would be like webos so your touch pads or beer or fries and it will also be currently for like Windows Phone 7 that kind of thing so currently today we have agents for iOS windows mobile and blackberry and then this winter Android is coming and so you know so if you have exchanged it's an added benefit you can manage the activesync policies from this council without giving people you know access to your exchange environment directly if you do not have exchanged or video if you don't want to hook into exchange you absolutely don't have to do that at all it's just that added you know functionality so the other big benefit of having the platform to manage these devices from is that you have one console to rule them all so to speak so you're able to manage iOS you know Android you know windows XP windows 7 windows vista mac OS anything from tiger upon to lion now you know redhat machines everything is all from the same console and why that's important is because now you only have one place to manage your security you know your role based access and so when you create these roles for people you know you can have a mobile device administrator who can only manage mobile devices or you can have a help desk where they can only no issue like lock commands um or even wipe commands and you know you can really restrict the functionality based on security that way and you're not having to deal with separate systems managing all these separate security profiles so having this all in one environment to report on to secure against to manage is a very big feature and since it is built on the 7.1 sp1 platform it means it's very scalable one mobile management server can handle 20,000 mobile devices and 20,000 workstations so you you're usually not going to see that scalability in many other products and so what that means is you know reduced costs for infrastructure when you go to roll roll this out in the simplified management another key architecture piece here is workflow integration I have some examples of that and you know I mentioned earlier of being able to tie into existing business processes or providing you know front end for clients um you know that's going to be critical because when you're reviewing all these mobile management products where they're looking at you know semantics or other companies everyone has to play by Apple's rules so what that means is you know apple says you can do these sets of commands with the devices you can collect this type of information from the devices and that's what we have to do so it's not what you can manage in the devices that's going to be very similar but it's how you're managing it you know are you going to be managing from single console are you going to be able to automate this are you going to be able to create detailed and automated reports off of it this is this is where mobile management really shines I'm going to answer a couple quick questions someone asked about blackberry support so I mentioned we have an agent for it more specifically how it works is we still rely on the beds or the BlackBerry Enterprise Server to do most of the management these BlackBerry devices so what we offer is basically augmented functionality and that we can gather detailed software hardware operating system information off of the device including like memory usage that kind of thing so that you can report against it against all your other assets no so it'll be with all the other mobile devices and work stations etc but we also offer remote control anyone who's done any kind of mobile device support knows that it can be painful especially on blackberries because the menus are changing with each you know major OS revision from OS for 20 s 5 206 it can be painful to walk people through these menus to configure certain things and so we allow you to remote control them whether it's over Wi-Fi or 3G or whatever and so you can actually see their screen take screenshots recording video recordings etc so that's the blackberry support that we have today and another question we got was do we support iOS 5 yes so iOS 5 will work today if you connect it into mobile management 7.1 there's new features coming out with iOS 5 new management features that are going to be reviewed and you know probably implemented in a future mobile management release so those those new management features aren't available today but the all the features i'm showing you in this demo are available today for iOS 5 and android support we're expected to come out this winter there's going to be a beta program so probably in a couple months or so I'll be doing another webcast probably give me a sneak preview of what the android support will look like ok so what we have here is the main mobile management portal which is just showing you how many devices we have on here and our licensed information from here we can do a breakdown and devices if I operating system and you can see most of our devices are on ios4 i also have a blackberry emulator and their windows mobile this was a touch pad before I returned at the staples and and someone added an iOS 5 device so you can see that it works so a lot of these reports you can right-click and drill down and be the details so this is where you can see all the specific devices its's a lot of iPads most of our consultants have one it's great for note-taking and doing architecture designs on and you can see you my device here anytime you see a mobile device typically you can right click on it to get some admissions or to bring up more information so you can see these are common iOS actions such as doing or like a remote walk move nvm is basically our selective wipe it tells it to uninstall the agent along with all the content in the mobile library and all profiles which would include you know any kind of mail configuration and other no corporate data that was sent down through profiles that would get removed reset passcode obviously that's a that's an important one to have when you require passcodes especially if there's any kind of complex then know people change them they forget them now you can reset that remotely um send inventory forces the inventory to be sent so that's going to include like your installed software information hardware information that kind of thing update policies who make a change you can tell the devices to immediately update and then white devices that full factory wipe I mentioned earlier where you would need itunes to reactivate the device so just like everything else in the platform you know these are treated like assets as well so we know if you have ulterior solutions like client management and asset management you're going to see these as assets and you know you'll be able to tie into whatever asset configuration you already have okay you can also define your own actions this is where you're going to start seeing a lot more customizations and flexibility in the platform so I spent a few minutes one day and I created one to show a device on google maps and so you can do that and then the iOS device and it's going to show you on that device within Google Maps you can see my exact coordinates slightly west of Oxford right now let's go into let's go into the multiple library so the mobile library is where your your documents media applications all get pushed down to your iPad and iPhone and with within this you have different feeds each feed contains different sets of items currently you can target feeds based on language in the next version you'll be able to target feeds based on almost any kind of criteria you can think of so you know as I mentioned earlier you have a group for like sales advices or marketing twice's and be able to send different applications different documents to those devices so let's see what that looks like so this is an example of a NASA HD application and you add your information about the application here so you put in your name version off their etc from here this is where specify what type of item this is so we told it this was an application and then it's going to ask ok you know where's this application coming from commercial means app store in house means you developed internally therefore you need to actually upload like your IP a plist files so that the mobile management server can deploy that to the agent or sorry to the device you can target the type of platform currently in mobile I versus for iOS but you can see there's going to be support for Android and Windows Phone 7 in the future you can set a minimum platform version so if you know the application won't work on a certain version you can set a minimum that to apply to so if you know something only works on a five-point oh you can set that here so that way people aren't seeing content that doesn't apply to the devices you can set a priority for each of these whether it's a document media or even application if you set it to recommended it basically Flags it next to the item and so it says it's a recommended you know item to install if it's required it'll send down a pop-up to that device and it will alert the user that there is something to be installed that they should open the agent right away to install that you can specify your own icons here and then this is where you link to the iTunes Store now earlier in the presentation I mentioned the volume purchase program where you can purchase multiple licenses and you know make those available to your employees so this is how you do that apple provides you a link which is specific to you know your license purchase and this is where you would put that link you'd put that in here and that way if someone installs the application from here it's going to pull from since pool item is featured basically just you know mix that like a recommendation item is published allows you to hide certain things you know if you're basically in like draft mode if you don't want to publish it right away you can leave that unchecked so an example of a document let's see here how about ideas program videos you can see this is a this is a media type and it's just linking to our vimeo channel which has recordings of all these videos that we do and if you haven't noticed this whole interface here is Silverlight I believe that's kind of a direction that most of the user interface is going to so let's take a look at what that looks like on the device itself so this is my device you can see this is what the agent looks like we're going to click on that and this is my applications tab down here which currently you only get through having an in-house agent if you get the agent through the App Store and install it you won't have this little applications tab it would show up under downloads over here but this is how its represented to the user you know other side so if you want to install because we try installing a world of goo this is something that Pat one of our sales engineers recommends oh well he recommended a five-dollar game so I won't be demoing that installed right now but you can switch back here to the agent and then the next tab over is where our documents live so you can have you know PDF documents word documents anything the iOS supports you can have in here for viewing and then once you click on this you can see a download down here and then it's going to open it mediately and then when you're done just click done and you're sent back to the agent and now you can see that this is cached so that I don't need to be online to open this anymore and this will always live down here and so earlier when I was talking about the Selective wipe and it renew being you know documents and such you've sent down from the server this is all that content that would get erased if you were to do a selective way so this is a tab for different videos that you push down and then this is basically just all recent downloads so it's just going to show you like the top six or so and then you also have your about screen so that you can know you know putting contact information for these are if they need require support if you're familiar with the semantic management agent on Windows some of this will look a little familiar being able to see you know some more detailed agent information what it's sending up to the servers and you could send you could recent an inventory real time if you wanted to and then this is just some internal logs they have available they can email for troubleshooting purposes okay so we're going to dive into the configuration editor and this is where you create different configuration profiles to securely manage your devices and also to provision different configurations I'm going to walk through some of the more common ones a very common one would be provisioning provisioning exchange profiles for anyone who's created documentation for the users and how to configure their Casper exchange in some environments this can be a little tricky for them to get all the right settings and so the idea is that you can configure everything or at least as much as possible for them and then leave certain things blank so for instance you know your user name their email address and password blanks that will prompt them but everything else like the server name ssl configuration number of days is synchronized that's all provided for them if you have a certificate you can include that as well and you can have multiple you know profiles for these so if you do have you know multiple exchange environments or whatever you can have several these and then apply them to different devices if you're not on exchange and using you know I map from the iOS device to connect to a system this is where you can define that almost any kind of setting configuration we know about iOS can be configured in here passcode is obviously one of the more popular ones this is you know requiring a simple passcode a common question we get is you know how does the encryption work on iOS so iPads and iPhones come with hardware encryption the way it's activated as if there's a passcode set on the device so if you're requiring a passcode that's going to enable the encryption features at the operating system level in iOS this is where you set your your lengths or complexity how often does it expire how often this does the device lock history of the pass codes to keep number of failed attempts before wiping you know how often this device lock that kind of thing restrictions these are great if you need to restrict you know some core functionality on the device so if you don't want to allow them to install applications or take screen captures or use the camera on their iPhone these are all options here you can configure your specific application to allow or not allow and you can say you know only allow thing you know movies like lion king to be watched you know but not anything above G or PG or whatever so I don't think that usually comes up very often a corporate setting but you have that available VPN profiles if anyone is configured a complex VPN environment on iOS device you realize the value of this right away being able to provide all these complex settings for your end users whether it uses passwords or a secure ID token or certificates all that's available here for you to provision doubts you know one of the examples I mentioned earlier in security compliance you know being able to only provision certain configurations to device basic teria so an example of that is you know not allowing jailbroken devices to use VPN so what we do here is we would only apply this VPN profile to devices that are no secure or its devices they have a passcode set or you know whatever you want web clips are little like bookmark shortcuts you may have seen on iPhones iPads I would like to send out bookmark I'm going to use an example of this in my policy later on to show you how you can target devices based on different criteria Wi-Fi provisioning I imagine is not very common and so another reason why these are important it's not just provisioning to two devices but also removing them from devices in my example I mentioned earlier with a selective wipe of being able to remove emails and other corporate data from a device so when you have this you know for instance this exchange profile config a provision to a device and you do a selective wipe it's going to remove all these profiles from that device so if there's content like emails calendar entries contained within that account it's going to be removed as well from that after that selective wipe is complete okay so with all these profile options we have this is how we apply them to devices if you're familiar with the platform or with alterous this is going to look very similar to policies you've already been working with so here's a very simple one i created a certificate to push down and i made that into its own configuration and so you can you can add you know multiple configuration settings in here you have as many as you want you can allow them to remove it or not remove it you have options up here for that and then apply to this is your targeting this is what allows you to specify which devices you know get this policy so this is a very simple one that's my certificates is only going my device so therefore i just have adam's ipad in there but if i wanted to add multiple devices i would just choose all mobile devices and then you can add these over but since this is my personal certificate i'm not going to distribute that now if i wanted to send this to a whole group you know i mentioned earlier having you know like a group for like sales force or groups like marketing this is where we do that you'd have a view and a group set up now you could apply a policy to a whole group advice devices if you want me to and then from there after you apply that you can see which devices are actually affected by this policy and you can turn the policy on and off if the policy is off it will on it will be removed from the device next time of checks in by default out of the box the d the check in period four devices every 24 hours but that's configurable you can set that to three hours if you want so devices would be checking in for new policies every three hours and it would also be sending their inventory of installed software or GPS coordinates all that stuff so here's an example of a policy I mentioned the CNBC financial application earlier so what I did here is I added a web clip which is like a bookmark to here and then what I did is I created their targets and i called it ipads without the CNBC application and that was based on software inventory that we're collecting from the machine or from the device and so the effect of this policy is that for any machine or any device that does not have this application installed we essentially p sh down a shortcut kalica advertisement to install that application so if they click on that web clip on they would go and install that application and then after gets installed they fall out of this group and so they no longer see that shortcut anymore so it's just kind of a creative example of showing you know how you could assign policies to devices based on different criteria so you know you could be based on software inventory it could be based on security information it can be based on what wireless network really connected to one thing that I want to try in the future is setting up maybe like parameters for like GPS coordinates and stay you know if if device is falling within this GPS coordinate range would then get you know this certain policy so when you're building on this management platform give all sorts of options available to you if how you're going to manage these devices so that's it I mentioned you know being able to look at all this information on the device so these are some of the built-in reports that we have access to so this is like a basic device summary you can see you know what platform there on what operating system version that kind of thing even the right p address so let's bring up mine here so this is the resource manager for my device these are the same right click options i showed you earlier and then i'm going to show you all the data we're collecting from this device so this is kind of the raw south / inventory data you know all the applications are installed what version they are etc so you can report on that this is some more inventory data that's commonly reported on you know so being able to see you know is the GPS turn on did they accept the EULA um is there a 3g etre knives at jailbroken you know who owns the device who is the owner of its GPS coordinates you know memory usage all all that's available to you to create your own reports or the customized reports that are built in so i'll show you a little bit of the configuration so i mentioned you know when you enroll a device it's going through active directory and and that's its optional as you can see here and you can choose to allow droping devices or not you choose to require EULA you can disallow you have certain platforms from being on there this is where you set the frequency how often the agent checks in that kind of thing so there's two more things I want to show you in the last 10 minutes we have the one thing I mentioned earlier on was you know workflow integration as an example of how this platform really helps you manage mobile devices so we have a couple workflows that we created one of them is for instance self-service portal so basically what this allows you to do is end user can log in here and it's going to show what devices they own so once we log in it's going to show me all the devices enrolled under this account this is our demo account that we share so you know we have a bunch of things in here but this is my iPad i'm going to choose and from here you know so let's say someone lost the device an airport but it's loving the clock at night and your helpdesk may not be open and they're able to get to you know terminal or something to securely log in and they could choose to remotely lock it they could do a remote wipe full wipe selective wipe or just say you know check-in show me where you are based on gps coordinates any of those types of actions you can kind of hook into so we're going to do it lock and you're going to see on the right side here that it just locked my device remotely through the portal so you know this is something that's not out of the box but just an example of how workflow can tie in to other semantic products and you know if it needs to create a helpdesk ticket for you or whatever now you can use your imagination and what you can do with it another example I have is being a showed you we could click on the device and showing google maps with this workflow does it actually looks at the GPS coordinates for all the devices and then it plots it on google maps and this is like I said it workflow running on the back end here so you can see we have a lot of iPads all throughout the country and you can see mine southwest Ohio is down here I have the option to you bring up the resource manager for it or I could force like update location so if i do this this will show you the screen i showed you earlier which is the resource manager so again you know this is just an example of some cool things you can do with you know integrating with the platform someone asked about the browser I'm using i'm working with IE for the most part I e says that or sorry the console does require IE you know as I mentioned earlier those and these interfaces are in silverlight some hoping over time more this is becoming browser agnostic but for right now internet explorer is the required browser to use now for the workflow examples i showed those are browser agnostic in fact they tend to work better in chrome since its you know that's what google maps tends to like more and someone else fails in Greenville I'm not known um I'm an Oxford Ohio right now which is near Cincinnati so very last thing i want to show is the install of the agent so what I'm going to do is I'm going to remove the agent here and if I thought about this beforehand I should have done a remote wipe or a selective white to remove it myself not remotely but I forgot to do that so this is my certificate i push down i'm going to remove so let's say you know this is a clean device you need to get enrolled on to your server and so I mentioned you have a few options you can do it through the app store so if you search for symantec you'll see the agent in there so this is one way of installing it or you can build your own agent which is what we did and the way you do that is you build it and then you can put it up on the web server somewhere so i created this quick little install link and it's going to ask me do you want to install the agent so i'm going to say yes so you can see the agent is now installed on here and then you open it up and it's going to ask you to enroll the agent if you have a fennec ation turn down then username and password is required there's actually a DNS record that you can add to your domain to make it autodiscover what server to connect to that speeds along the enrollment process so that the user doesn't happen to know any kind of tricky configuration then after you putting your credentials here click and roll you can see the branding I was talking about when you build your own agent you can have your logo at the bottom there this is the customizable you love it can have in there so you can especially when you have personal devices connected on your network you know it may be important for you to tell them that you know now it's going to become a managed device they may still own it but you know you're going to have certain control over its so this is to let them know that it's completely optional though so once they accept that it's next going to install profile this allows of a server to manage the device then once they click done with that the device is completely enrolled and now it's checking into the server your it's already set up its inventory if they opened the agent they have immediate access to the mobile library and it gets any content you want and the device is fully managed and you can do everything with it I just showed you so someone asked does the agent start with iOS when it starts they answered yes so you know if it gets rebooted the agent is still running in the background whether they open it or not assuming you're using the in-house agent that you built yourself or paying someone like i TS build it for you we can do that as well if you're using the agent from the app store then that's they're going to have to open the agent for it to check in so it's the big difference between the app store agent and the one you build yourself if you're interested in seeing this in your environment on site you have a couple of options we do on you know proofs of concept your demos on site where we can stall any of your servers but it does required you have to be a member of the apple developer enterprise program which sometimes takes a few weeks to get in and so you can arrange that you can coordinate that with us in your semantics salesperson or you also have the option of your demo like this of having the environment up in the cloud and that way we don't have to actually install anything on site and it's very quick turnaround so we can do demos like this up in the cloud we also have a production service of this out in the cloud so that if you do you know want to add mobile management to what you're doing with endpoint management today you don't have to add you know all these new servers and licenses etc because I TS can have it back out in the cloud for you and then you know it can connect into your production environment if you already have an ulterior server setup you know we can arrange that to happen a technical level as well so you know if you have any further questions especially around you know sales or seeing a personalized demo or proof of concept feel free to reach out to I TS and you can go to our website at I TS delivers calm and contact contact us there where I believe our phone number is 877 altiris so I want to thank you for everyone coming on in watching the demo today