Mobile protection

Security for Mobile supports the following types of mobile devices and operating systems:

Mobile devices must have an active cellular data or Wi-Fi connection and connectivity with the communication server appliance.

Security for Mobile uses push notifications to alert mobile clients when policy updates and tasks are available. Push notifications are sent by the communication server appliance via the service provided by the operating system manufacturer:

You can check whether mobile push notifications are working correctly in the Mobile Push Notifications Check section in Configuration > Miscellaneous.

To learn more about GravityZone Mobile Device Management workflow, please refer to Mobile Device Management workflow.

To set up the infrastructure for iOS mobile device management, you must provide a number of security certificates.

For more information, refer to Certificates.

In the default GravityZone setup, mobile devices can be managed only when they are directly connected to the corporate network (via Wi-Fi or VPN). This happens because when enrolling mobile devices they are configured to connect to the local address of the communication server appliance.

To be able to manage mobile devices over the Internet, no matter where they are located, you must configure the communication server appliance with a publicly reachable address.

To be able to manage mobile devices when they are not connected to the company network, you must configure port forwarding on the corporate gateway for the appliance running the Endpoint Communication Server and Endpoint Events Processing Server roles.

The communication server appliance can be configured from GravityZone CLI: