The Apple Core

Jason D. O'Grady & David Morgenstern

Enterprise iPads: Policies on personal iPads and remote access

By | July 24, 2010, 9:38pm PDT

Summary: What options do enterprise managers have when executives and other staff bring personal iPads to work and want to connect to company services? The new, more-capable mobile devices such as the iPad, may stretch the definitions currently found in company compliance policies.

What options do enterprise managers have when executives and other staff bring personal iPads to work and want to connect to company services? The new, more-capable mobile devices such as the iPad, may stretch the definitions currently found in company compliance policies.

A recent post on the Citrix Systems blog by Chris Fleck, vice president of community and solutions development, discussed secure remote access options for iPad, including native apps, VPN with Web apps, hosted virtual apps, and virtual desktops. It also looks at IT considerations for company-owned and personal iPads, and applications.

The personal iPad brings its own share of problems for IT managers.

Many early adopter employees and specifically executives are now bringing their new iPad to work and asking IT for access to company apps. One problem is most companies have policies against storing company data on anything but company owned equipment. While the iPad does include a great email app including support for Exchange, the decision needs to be made to change the company policy or allow exceptions for iPad users.

Beyond email, corporate calendars are also supported by the iPad, however most users complain of conflicts and errors compared to Outlook Calendar. The best solution for most companies dealing with personal iPads is to not allow apps or data to run locally. IT can provide safe remote access to hosted email and apps or virtual desktops.

Of course, Citrix sees advantages in running hosted virtual applications.

With XenApp IT can dictate what user gets what app and can easily turn on or off access to applications without managing the iPad itself. Only a single app, the Citrix Receiver is required on the iPad and the configuration can be done via emailed or clicking a link on an intranet web wage. No MDM software is required or concern about company data on personal iPads. A con of this method is that a WiFi or 3G connection and apps will not work offline.

According to a Citrix survey in May, the iPad is proving to be a monster hit in its enterprise customer base.

•80 percent will purchase and use the iPad for business.
•84 percent of organizations will support personal iPads; 50 percent expect their organization to purchase for them.
•Primary app to be used on the iPad are productivity apps with 87 percent response rate.
•90 percent of respondents will use iPad for business email, closely followed by the ability to view, edit and create presentations. Nearly 60 percent of respondents indicated that they will use iPad for online meetings and to access critical business information.
•Largest benefits: 90 percent indicated increased mobility to work remote, at home, or anywhere, 74 percent indicated improved productivity and satisfaction.

Kick off your day with ZDNet's daily e-mail newsletter. It's the freshest tech news and opinion, served hot. Get it.

Topics

David Morgenstern has covered the Mac market and other technology segments for 20 years.

Disclosure

David Morgenstern

Freelance journalist/blogger David Morgenstern has nothing to disclose.

Biography

David Morgenstern

David Morgenstern has covered the Mac market and other technology segments for 20 years. In the recent past, he founded Ziff-Davis' Storage Supersite, served as news editor for Ziff Davis Internet and held several executive editorial positions at eWEEK. In the 1990s, David was editor of Ziff Davis' award-winning MacWEEK news publication as well as its successor title, eMediaWEEKly, which focused on multiplatform professional content creation. His byline can be found online and in print publications including CreativePro.com, Peachpit Press' Mac Bible and Popular Photography.

20
Comments

Join the conversation!

Just In

Did you know...?
vulpine@... 8th Aug 2010
@kb5ynf : ... that the iPad has Cisco VPN capability built in?

Sounds to me like you're doing things the hard way.
0 Votes
+ -
No way.
trickytom2 25th Jul 2010
The idea of opening up the enterprise to personal devices is insane. I cannot even begin to imagine the legal and security issues that would arise under such an ill-concieved program.

Image having 20% of your employees downloading confidential or health data onto their iPad, then handing it to their kid to take to camp.
... is always a recipe for disaster. From the increase in chance of having a rogue virus introduced into a secure network, to the liability of having somebody's personal browsing habits along with work related history, the benefits will never be enough to justify the dangers.
0 Votes
+ -
@trickytom2 Keep in mind what we are advocating is a solution that does NOT allow downloading data to an iPad. The app runs securely on a server and only the UI is delivered to the iPad under IT control.
I would suggest there are two issues we are dealing with here. First, is "should personal devices be used in enterprise environments" and to that I believe the obvious answer is NO. The second is "Are IPads Enterprise ready". If an executive wants to use the IPad, all he/she has to do is to get the business to buy one for him/her, and the first issue is competely moot.
0 Votes
+ -
Yes, way
vulpine@... 26th Jul 2010
@trickytom2 : Imagine having your bosses demand the connection; because I happen to know first hand that that is exactly what is happening in a much larger proportion of the enterprise and you want to acknowledge. I already know of iPads being used in specific international companies and am aware of company-written apps for the iPads in their customers hands as well as their own.

This isn't to say Android won't get the same treatment, but to ignore the fact that technology is making a major leap forward is merely begging to lose that job you thought so secure.
@trickytom2 Keep in mind what we are advocating is a solution that does NOT allow downloading data to an iPad. The app runs securely on a server and only the UI is delivered to the iPad under IT control.

@ChrisFleck
That 'little' point seems to have escaped him.

Unless he doesn't know what Citrix is.
I agree with TrickyTom2. I'm more curious to know how enterprise users are utilizing the iPad in their enterprise environment, e.g., what apps are most popular. I would imagine that a great many companies are not using the iWork suite, so how exactly are users producing presentation documents and the like? I'm waiting for Microsoft to wake up and produce office apps for the iPad.
0 Votes
+ -
I/O an issue
trickytom2 25th Jul 2010
I may be wrong, but it seems like enterprise-users are trying to shoehorn the iPad into the enterprise simply because they want to use it. It's like they're trying to build a need for the product, instead of building a product to meet their need.

I think that in the coming year, there will be two clear categories of tablets: full OS pads for entertprise, and phone OS pads for consumers; all of which means that the iPad is likely to remain a largely consumer device unless they expand its I/O, add wireless printing, and develop a better file system that's not iTunes-based.
0 Votes
+ -
I/O is hardly an issue.
vulpine@... 26th Jul 2010
@trickytom2 : I won't argue an opinion, though I might point out that fact, for the moment, seems to counter it. I have already seen and heard of iPads in use for corporate-wide purposes which include offering access to secured personal data of the customer, by the customer and also within the company--as well as uses in corporate executive management of the company. There is more than ten years of proof that the "full OS pad" is a failure for the primary reason that developers saw little to no need to write pad-specific applications for a desktop operating system. In all honesty, if you discount the touch-centric operations of today's pads, the current Android and Apple mobile OSes are easily the equivalent of the first GUI desktop OSes, if not better.

We're talking about having the capability of carrying a 286 or 6504-based computer in our hands where such power and portability was considered impossible in the day of these limited processors. We're talking about having anywhere from 8Gigabytes and up of storage capacity in our hands when 8 Megabytes was once more capacity than any machine supposedly could ever need. So now you're saying that in order to even be remotely usable in the enterprise, we need an OS that is far, far more than what these same companies used as little as 30 years ago.

Open up your mind, my friend. If you don't, you're going to be left far, far behind.
0 Votes
+ -
@trickytom2

This ComputerWorld article was dated April 7, 2010. That is just four days after the WiFi only model went on sale. I'm sure that after close to 4 million iPad have been sold a "few" of them of made it into the enterprise environment.

Could you give a more updated article link on how some companies have "solved" the enterprise issues speculated upon in the ComputerWorld article you linked to?

By the way, while trying to recall the exact date the iPad went on sale in the US, I came across this iPad article penned around the same time as the ComputerWorld article you cited.

http://digitaldaily.allthingsd.com/20100405/apple-300000-ipads-sold-on-first-day/

The first two sentences state: "Turns out, first-day sales of the iPad weren?t quite as ?magical and revolutionary? as some thought. This morning, Apple said it sold over 300,000 iPads in the U.S. as of midnight Saturday, April 3?including pre-orders.

I only post that to illustrate that "things" can radically change in the span of three short months. Perhaps the iPad enterprise concerns are not so dire now as the April 7th ComputerWorld article speculated on.
0 Votes
+ -
IT has to be flexible, or else.
terry flores 26th Jul 2010
There are rules, then there are executives. The iPad is attractive to them, and it's not so easy to brush off a senior VP who can call up your boss' boss' boss and get you spiked. We learned that from the iPhone, which IT had no intention of supporting. That lasted about a week.

In large companies and IT organizations, there is a coming wave of "consumerization" where employees want the freedom to choose their personal device, and still have access to mainstream corporate IT functions. Our company was already on the path to this with web-based applications, and we are accelerating. Microsoft Office is still the main holdout, web substitutes like Google Docs just don't make the grade for us. Leakage of confidential data is still an issue, but security and encryption are getting better every year on devices such as smartphones and PCs. The user will always be the weak link, so training and assistance are needed to prevent the user from making stupid or negligent mistakes.
0 Votes
+ -
Or else What?
djmik 26th Jul 2010
I love these comments. "IT must be led by the uninformed user base that needs to have the latest cool gadget or they can start looking for work elsewhere". How about, "You are the user, and you must conform to IT polices or else....". IT polices are in place for very good reasons. They are not put in place because we have nothing better to do with our time. In the case of the executive, that can be a challenge, but a good IT manager, director, CIO should be skilled in advising C-Level Execs about how to keep their company secure, streamlined and supportable. Most who are not blinded by shiny things see this.

This notion that IT is some communist entity that allows for no cool gadgets is getting old. Bring a good use-case to IT, show ROI and do so without IT having to change major parts of the infrastructure or add new parts, like implementing Citrix solutions, and we will listen. Bring with you an emotionally charged desire to be the coolest kid in your cube-scape, and we will turn our heads opting to solve more immediate IT concerns.
0 Votes
+ -
Or else lose your job.
vulpine@... 26th Jul 2010
@djmik : "How about, "You are the user, and you must conform to IT polices or else...." While I agree that IT policies are in place for a reason, it is NOT IT that set those policies, but rather management who took IT's recommendations in mind in order to create those policies. Techies are not the bosses of corporate management--not even IT management. Their job is to make sure the systems work as they are intended and to advise on any new technologies the bosses get it in their minds they want to investigate. When the bosses say, "We want to add this capability," the techie who says, "it's impossible," had best be able to back that statement up with verifiable references or he's out the door and the next one in is told, "Make it so."

Yes, I do agree that some policies should be 'common sense' approaches to network and data security, but to say, "That device can never work because we can't secure it," will only garner the response of, "Then secure it and don't argue about it."

Remember our current President: He insisted on bringing his Blackberry into the White House over the arguments of "security risk" by nearly everyone. What's operating in the White House now on a daily basis? That's right, a 'secured' Blackberry--despite all the complaints that it couldn't be secured.
0 Votes
+ -
If you are an IT drone,
arminw 26th Jul 2010
@djmik -- and your boss who can fire you just as soon as look at you comes to you with his shiny new iPad and says he would like to have access to the company information infrastructure, you have an immediate problem about keeping your job if you don't accede to his/her request.

IT just better find good secure solutions to bring modern personal technological gadgets into the business environment, if the big bosses find such gadgets to be useful in the company.
"This notion that IT is some communist entity that allows for no cool gadgets is getting old. Bring a good use-case to IT, show ROI"

Well, this is interesting.

Here I was under the impression that the CEO of a company hires IT to do the job, not that IT had to be persuaded to do what the boss wants.

After talking to an IT professional recently I think that the problem is that IT is usually feeling a bit harassed, dealing with Windows and networking conflicts daily.

So some will be paranoid about adding even something relatively easy.

If you can support Blackberries, and do ssh for remote access, adding iPads shouldn't make any more problems. It might just shift user attention away from desktop/laptops and amount to a wash.

The same arguments were used to bar Macs ten years ago...

Many are the stories of IT managers that tried to bar Macs; and they often lost that battle.
0 Votes
+ -
Change is NOT good
thofts 26th Jul 2010
After dealing with a couple of large corporation IT departments I conclude they like things to remain status quo. I specifically know of one IT Director who wouldn't even consider trying to support iPhones and iPads. He insisted the company stay with the Blackberry phones and Dell laptops they had. However a new VP wanted his people to have iPhones and iPads. The IT guy threw a fit...the new VP threw him out the front door and hired someone more supportive of management direction.
Just Say No.
I handle these personal devices by providing them with an Internet only connection; they don't get direct access to our internal network. From there, they can use RDP or web-based services to do what they need in the corporate world and I don't have to worry about trying to secure their personal devices. That works for us but we're a small company with only around 100 users nationwide and no government mandated data policy requirements to meet.
0 Votes
+ -
Did you know...?
vulpine@... 8th Aug 2010
@kb5ynf : ... that the iPad has Cisco VPN capability built in?

Sounds to me like you're doing things the hard way.

Join the conversation!

Formatting +
BB Codes - Note: HTML is not supported in forums
  • [b] Bold [/b]
  • [i] Italic [/i]
  • [u] Underline [/u]
  • [s] Strikethrough [/s]
  • [q] "Quote" [/q]
  • [ol][*] 1. Ordered List [/ol]
  • [ul][*] · Unordered List [/ul]
  • [pre] Preformat [/pre]
  • [quote] "Blockquote" [/quote]
ie8 fix

The best of ZDNet, delivered

ZDNet Newsletters

Get the best of ZDNet delivered straight to your inbox

Facebook Activity

White Papers, Webcasts, & Resources
ie8 fix
ie8 fix