Sophos Mobile
8 Technical reference
8.1 Sophos Mobile server features
The core component of the Sophos Mobile product is the Sophos Mobile server. Its main features include:
■
■
The server is connected to the Internet.
The server makes it possible to set up a high-availability environment.
■
■
■
■
■
The administrator controls the server using the web interface.
End users can register their devices by using the Self Service Portal, or get a device from the administrator that has already been prepared for auto-enrollment.
The managed devices synchronize with the server through HTTPS.
iOS clients get triggered by the server through APNs, Android clients through GCM. Windows devices use the Windows Notification Service (WNS).
You can use an existing Microsoft SQL Server or MySQL database to store device and application information. Alternatively, you can let the Sophos Mobile installer create a new database using Microsoft SQL Server Express.
■
■
The database can reside on the same or a separate computer. This allows the use of database clusters.
The server supports multi-tenant setups to allow different customers on the same server.
■
Email access is possible through an integrated or a standalone EAS proxy. For the standalone variant, HTTPS access to the SMC server is required.
The Sophos Mobile server has been developed for Java EE (Enterprise Edition). It installs and runs in the well-tested industry-standard WildFly application server.
The server may be installed in virtualized environments.
8.2 Sophos Mobile web interfaces
8.2.1 Sophos Mobile administration interface
Sophos Mobile is managed through a web interface that is secured by a login and a session mechanism. You can implement password policies. Access control allows different user roles.
These roles have different sets of access rights. Each user can be assigned exactly one role.
For further information, see the Sophos Mobile administrator help .
26
installation guide
8.2.2 Super administrator interface
The super administrator is primarily used to set up and manage customers for device management.
The first super administrator account is created during Sophos Mobile setup. See Install and set up the Sophos Mobile server (page 8).
As a super administrator you log in to the super administrator customer which is also created during Sophos Mobile setup. For the super administrator customer, the Sophos Mobile console shows a customized view for super administrator tasks.
8.2.3 Self Service Portal
The Self Service Portal is secured by a login, session mechanism and a password policy. The account has to be set up by the Sophos Mobile administrator and can be associated with any tenant. The Self Service Portal is designed for end users to register their devices with Sophos
Mobile. The end users are also allowed to perform tasks for their devices, for example remote lock or remote wipe. The tasks they can perform vary according to device platform and configuration. As an administrator you can configure the Self Service Portal functions available to end users.
For information on how to configure the Self Service Portal for end users, see the Sophos Mobile administrator help .
27
