The document discusses Bitzer Enterprise Application Mobility (BEAM), a solution that allows secure access to corporate networks and data from mobile devices. BEAM isolates corporate access and data from personal apps through a secure container with an AppTunnel. It offers single sign-on access to corporate applications while maintaining a rich user experience. BEAM supports multiple mobile platforms and provides remote management capabilities for IT.

1. Bitzer Enterprise Application Mobility (BEAM)
Organizations have restricted employee’s access to corporate network and data from mobile
devices due to concerns of authentication, usability, policy control and data leakage. This
problem is exacerbated by the avalanche of new mobile-device types and BYOD (Bring Your
Own Device) programs. BEAM overcomes the mobile security risk by isolating corporate
access and data from employee’s personal apps on mobile devices and by extending the trust
gained within an internal network out to an employee’s mobile device while ensuring a rich,
seamless user experience.
Bitzer’s Secure Container, equipped with an AppTunnel™, and mobile container
management, not only allows secure access to Intranet sites and corporate
documents but also preserves the compelling user experience of smart mobile
devices. It offers the most integrated solution with Windows® authentication
infrastructure for secure Single Sign-On (SSO) to corporate applications.
Key Capabilities
●● Secure Container
-- Clear isolation between personal and corporate information
-- Secure browser for accessing Intranet, SharePoint and other document stores
BITZER VALUE
-- Encrypted off-line storage (if your security policy allows it)
-- Secure and easy Microsoft® Office document viewing, editing and storage • BYOD without compromise
on IT security, standards
●● AppTunnel and policies
-- App level SSL tunnel ONLY from Secure Container
• Rich user experience by
-- Eliminates need for device level VPN and risk of rogue apps using employee’s existing
credentials and Single
●● Integrated Windows Authentication Sign-On (SSO)
-- Simple, SSO access to Windows enabled sites and applications with
Kerberos or NTLM • Compared to mobile VPN,
a simpler and more secure
-- Strong 2-factor authentication supported (virtual smart card)
solution with lower total
●● Mobile container management (MCM) cost of ownership (TCO)
-- Enforces policy on Secure Container, not user’s device • Zero incremental IT
-- Remote lock/wipe, geo-fence or time-restricted access investment to support
-- Integrated with Active Directory to manage users/groups multiple mobile OS’s;
lower overhead cost and
-- Detailed usage statistics and management reports
higher ROI
●● Cross-platform
-- Supports iOS, Android®, BlackBerry®, and Windows Phone devices

2. 90%
BEAM Solution Components
will have a BYOD
●● Secure Container
program by 2014 (Gartner)
81%
of users would be
Ensures security by isolating personal from corporate data and apps. Provides authentication, secure browser
“very frustrated”
and secure document viewing, editing, and storage. Supports iOS, Android, BlackBerry, and Windows Phone
devices. Can be deployed throughthey had to enter enterprise app stores.
if consumer or password
every time they wanted to
●● Admin Control Panel (ACP) access Facebook. (Bitzer)
Bitzer Admin
Control Panel
Bitzer Secure
Container
Provides remote management of containers,
Enterprise
logging, policy enforcement, and remote lock/ Applications BMAX
Gateway
wipe. Deployment on-premises or in the cloud. Server
Competitive Comparison
●● BMAX Gateway
Offers secure Intranet access from mobile devices
BMAX-SA STANDALONE MOBILE VPN
or smartphones with zero programming, simple secure container
Certificate protection PIN protected inside None. No PIN protection
deployment and low overhead cost. Supports SSO authentication via Kerberos or NTLM protocols utilizing
Rogue App security
username/password or PIN protected, PKI certificates. personal apps None. All apps on device have access to device level VPN
App Tunnel not accessible by
Kerberos security Device trust with PKINIT Risky gateway trust with constrained delegation
Maintainability
Competitive Comparison browser
No duplicate list of target servers Maintain duplicate list of all internal servers
DLP Secure container, secure
(Data Leakage Protection) None
BMAX Standalone Mobile VPN
Deployment simplicity Install and use in minutes Requires specialized network engineer
Certificate protection PIN-protected inside secure container None
Rogue App security AppTunnel not accessible by personal apps None. All apps on device have access to device-
level VPN
Kerberos security Device trust with PKINIT Risky gateway trust with constrained delegation
BMAX Solution Components
Kerberos Maintenance
No duplicate list of target servers Must maintain duplicate list of all internal servers
DLP (Data-leakage protection)
Secure Container—Enforces virtual smartbrowser
Secure container and card authentication, contains secure browser and secure document
None
storage. Supports iOS, Android, Blackberry and Windows Phone devices. specialized network engineer
Deployment simplicity Install and use in minutes Requires
Secure Container MDM
Admin Control Panel (ACP)—Provides remote management of containers, logging, policy enforcement, and
remote lock/wipe. Can be in the PIN, users have direct access to
Device PIN No device cloud or on-premises. Requires cumbersome device level PIN to access
personal apps any app on device
Data atBMAX-SA Gateway—Offers secure intranet access container.
rest encryption Provided for all data inside secure from mobile devices or smartphones with zero to
None, depends on device manufacturer programming
and simple deployment.Protected by AES 256 keys derived from user supports Kerberos/X.509 authentication.
Pluggable authentication connector provide
credentials that are never stored on the client
Data in transit encryption AppTunnel via SSL None, depends on device Container that is
Bitzer Admin Bitzer Secure level VPN
Intranet Control Panel to rogue apps
vulnerable “secure browser”
Applications
Application authentication Windows SSO None
Bitzer Mobile
Remote lock/wipe Only lock/wipe data inside container
Access Lock/wipe user’s entire device
AppTunnel
Xcelerator
Compromised platform detection Yes (BMAX) Some vendors, yes
Rogue App security AppTunnel ONLY allows access from secure Basically none. Can blacklist apps, but only ones
container that are known bad and that’s usually too late
Security perspective Lock down container and only corporate access Lock down the device and manage ALL apps and
and apps access
Bitzer Mobile, Inc. | 440 N. Wolfe Rd. | Sunnyvale, CA 94085
(866) 603-8392 | sales@bitzermobile.com | www.bitzermobile.com
©2012 Bitzer Mobile, Inc. All rights reserved. Bitzer Mobile, logo, and the “simplifying enterprise mobility” tagline are trademarks of Bitzer Mobile, Inc.
in the United States. All other trademarks are the property of their respective owners.