Overview and Scope of G DATA Mobile Device Management

This article provides an overview of the areas and protective measures covered by G DATA Mobile Device Management.

The terminology used by G DATA in this documentation closely follows Google’s terminology. Find more information here.

What Is G DATA Mobile Device Management?

Mobile Device Management and the associated MDM web portal provide protection for your mobile devices. MDM can be used as a standalone product or purchased as an add-on to MXDR or our Endpoint Security product. Depending on the option used, mobile devices are managed centrally through Mobile Device Management Web Portal (standalone), G DATA Web Portal (MXDR integration), or integration into G DATA Management Server (Endpoint Security integration).

Android Enterprise is available only with MXDR or as a standalone product!
For technical requirements, see this article. For a detailed comparison of Android Enterprise features and app-based management, see this article.

Different management types and features are available depending on the platform, device ownership, and intended use.

Managing Android Devices

Different management types are available for Android devices.

App-Based Management

With app-based management, the G DATA Endpoint Security app is installed on the device and connected to MDM. The app enables centralized device management and provides G DATA security features such as malware protection, web protection, and root detection. Management is limited to the capabilities and permissions of the Endpoint Security app. As a result, control over system-level device settings and policies is limited.

Android Enterprise

Android Enterprise extends Android management through deeper, standardized integration with the operating system. This allows security policies, device settings, and app requirements to be enforced directly through Android management.

Android Enterprise provides capabilities including:

  • Defining and enforcing security and password policies centrally.

  • Distributing business apps through Managed Google Play.

  • Installing apps automatically and, where supported, configuring them centrally.

  • Managing app permissions centrally.

  • Controlling app use more precisely.

  • Integrating Managed Google Accounts into device management.

  • Locking or wiping devices remotely.

  • The G DATA Endpoint Security Agent remains installed on Android Enterprise devices and supplements device management with G DATA security features.

G DATA currently supports fully managed company-owned devices (Fully Managed). Other Android Enterprise management models, such as COPE and BYOD, are planned.

Managing Apple Devices

iPhones and iPads can also be managed centrally through G DATA Mobile Device Management. The features available for Apple devices depend, among other factors, on whether a device is supervised or unsupervised.

Apple Devices in Unsupervised Mode

Unsupervised devices can be managed through an MDM profile. This provides basic management, security, and configuration features. However, certain additional restrictions and management features require a supervised device.

Apple Devices in Supervised Mode

Supervised devices support additional management options and restrictions. This allows organizations to configure and secure company-owned devices more extensively.

Depending on device status, settings for the following can be managed centrally, for example:

  • Passcodes and biometric authentication,

  • App use,

  • Safari and web settings,

  • Wi-Fi configuration, and

  • Device actions such as locking or wiping.