Course Catalog

The User Visibility module manages mobile devices based on your corporate directory structure. With this IBM Security MaaS360® Cloud Extender module, administrators can manage the user devices that belong to specific groups.  They can target apps, policies, and content to the user devices that are members of a specific directory group.

IBM Security MaaS360 User Visibility is a MaaS360 Cloud Extender module that integrates your Active Directory and LDAP-based corporate directory users and groups with MaaS360.  MaaS360 integrates with your directory services to use existing corporate directory users and groups to assign policies and distribute content and apps. In this course, you learn how to use and install User Visibility. You also learn how create customer attributes for Active Directory and MaaS360 and pass that value between the two resources. 

In this lab, you explore integrating IBM MaaS360, IBM security Verify (Cloud Identity), and Active Directory Federation Service (ADFS). In this scenario, Cloud Identity acts as an alternate IaaS (Identity as a Service) provider to ADFS so when ADFS detects a mobile device user, it redirects the authentication request to Cloud Identity. Cloud Identity works with MaaS360 to manage device compliance and enrollment requirements. This lab walks you through integrating all 3 tools in a cohesive, zero-touch, architecture that does not impact your business operations.

Whether it’s a document sent over Slack or a game of conference call bingo unfolding on Zoom, telecommuting infrastructure has permeated our working lives. The workplace and classroom have both transformed overnight from cubicles and desks to couches and kitchens.

As employees or students shift to working or learning from home, a diverse range of endpoints need to be managed and protected – including smartphones, tablets, and laptops. Cloud applications should also be deployed to support those trends—providing business continuity for organizations while enabling a frictionless experience for users. This is accomplished via unified endpoint management (UEM), identity and access management (IAM), and web-centric threat defense working in concert.

Further, it’s just as imperative to effectively secure those applications and the devices users rely on for access—whether an organization-issued laptop or a personal tablet.

A program like bring your own device (BYOD), while implying usage in the office, is more of a concern at home due to the risks of unsecured WiFi, unauthorized users, risky downloads and web traffic, and the potential for phishing attacks to compromise credentials.

However, those same problems tend to crop up on organization-issued devices as well—typically deemed a more secure asset. Ultimately, regardless of the device, the human behind the machine presents the risk.

Duration: 53 minutes

In this video, you will hear from IBM experts about Identity Management and Access Control features in MaaS360, including Multi-factor, Biometric, and Passwordless authentication methods.

In this Open Mic session, you learn how to streamline app login for end users when you integrate MaaS360 and Verify (Cloud Identity). IBM experts Matthew Shaver and Adam Case review MaaS360 and Cloud Identity architecture, desktop and mobile workflows, and browser deployment patterns. They also demonstrate how to enable Cloud Identity in the MaaS360 Portal, configure Cloud Identity, and configure GSuite on mobile.

In this lab, you will learn how to deploy a test environment that integrates IBM MaaS360 and IBM Security Verify (Cloud Identity) Essentials with a third-party SaaS (cloud) application.

The Mobile Enterprise Gateway is a Cloud Extender module that provides mobile device users the ability to access Intranet resources without using a device VPN. On the device, the MaaS360 Browser, MaaS360 App, and MaaS360 SDK integrated and wrapped apps use the Enterprise Gateway to securely access corporate resources that are behind the firewall.

In this lab, you configure MaaS360 Cloud Extender modules, a WorkPlace Persona policy, and a content source to provide secure access to an intranet site and Windows File Share from iOS and Android devices.

This course walks through the secure communication processes between the mobile device user and the upstream resources when using the IBM Security Mobile Enterprise Gateway.

The IBM Security MaaS360 with Watson Cloud Extender enhances device management capabilities by integrating with behind-the-firewall systems within your corporate environment, such as email, corporate directories, certificate authorities, and application and content servers. Cloud Extender requires minimum resources, easily traverses proxy environments, and provides secure messaging and data transfer between the MaaS360 platform and behind-the-firewall systems. 

In this course, you learn about Cloud Extender and how you can deploy Cloud Extender to meet your device management requirements. You also learn how to install Cloud Extender, configure and enable it, and set up Cloud Extender health check alerts.

Objectives

• Describe how Cloud Extender modules apply to common use cases
• Locate Cloud Extender installation and configuration requirements 
• Describe how to deploy Cloud Extender modules to integrate your mobile devices seamlessly with corporate resources
  
• Install Cloud Extender
• Enable and configure Cloud Extender
• Enable and configure Cloud Extender health check alerts

In this course, you learn how to integrate IBM Security Verify (Cloud Identity) Essentials with IBM MaaS360.

The videos walk you through the steps to integrate MaaS360 with verify (Cloud Identity) to enable seamless single sign-on for mobile devices and desktops.

Find out how to harness the power of GSuite and other Google tools using MaaS360.

The topics covered in this video include an overview of Google, GSuite, and MaaS360, GSuite Integration and Gmail setup, Android Enterprise and Device Management, and ChromeOS Management.

In this training module, you learn how to integrate IBM MaaS360 and Microsoft Azure AD for user authentication and user visibility. User authentication enables devices to enroll in MaaS360 using corporate credentials. User visibility enables you to leverage existing corporate users and groups for policy assignment, and application, and document distribution.

In this Open Mic session, you learn all about leveraging MaaS360 and TeamViewer to make remote support even better with Attended and Unattended Access. In this session you also learn about the TeamViewer global footprint, credentials, and security, integrating MaaS360 and TeamViewer, iOS remote screen sharing, and TeamViewer mobile device add-ons. 

This session was held on August 28, 2018.

The lines between mobile and desktop computing continue to blur. Form-factors have converged, enabling more portable devices that can connect to the cloud at any time, from any location.

As organizations seek to support this modern workplace, mobile connectivity becomes critical for connecting employees, contractors, and partners with data and applications. Mobile empowers workers to be productive in new, innovative ways. But it also challenges IT to rethink how services are delivered in an efficient, safe, and cost-effective manner.

Unified Endpoint Management (UEM) has emerged as the de-facto configuration and management platform for any type of device. But what about managing the always-on data connections made as users operate outside of the corporate campus?

IBM Security MaaS360 with Watson has partnered with Wandera to offer end-to-end management for the mobile experience, from device configuration to controlling the application usage on Windows 10.

In this video, experts from Wandera and IBM discuss how MaaS360 incorporates robust data controls for Windows 10 to deliver a consistent policy across all mobile devices, including:

• Flexible data controls that ensure always-on mobile connections are used responsibly to avoid surprise overages on enterprise cellular bills
• Mobile content filtering that applies category-based policies across applications and browsers to enforce acceptable use

Industry-leading network security features that defend against mobile phishing attacks, third-party app store downloads, and C2 traffic, inside and outside the office.

Duration: 32 minutes

Mobile device management is complex and each organization uses it differently to meet business requirements. What is applicable to one organization might not apply to another. Sometimes, best practices are work arounds. In this video, you learn some Cloud Extender best practices you can use to manage your mobile devices.

In this training module, you learn about the Cloud Extender Exchange ActiveSync Manager module that you can use to integrate with Microsoft Cloud and on-premise Exchange mail environments. Integrating  with enterprise mail is an easy way to begin managing mail connected devices across your enterprise. You learn how you can use this integration, its requirements, and its implementation details.

In this course, you learn how to integrate IBM MaaS360 and Microsoft Office 365 for unified endpoint management of devices that are accessing corporate email. 

This video walks you through how to secure access for Office365 with IBM Security Verify (Cloud Identity) and MaaS360. Along with the end to end demonstration, this video also covers the following topics:

• Why protect access to Office365
• Requirements for securing Office365
  
• Architecture overview for on mobile and an unmanaged device
• Configuration steps to secure Office365
  

Duration: 35 minutes

Learn about Cloud Extender setup tips, common errors in Cloud Extender configuration, best practices for ongoing maintenance and health alerts, and more. Use the bookmarks to access the following topics:

• Introduction
• Overview and agenda
• What is the Cloud Extender and how does it work?
• Installation prerequisites
• Installing and configuring the Cloud Extender
• Common errors and troubleshooting tips
• Q&A
  

The IBM MaaS360 Enterprise Gateway is a MaaS360 Cloud Extender module that enables access to behind-the-firewall corporate resources from a mobile device without using a device VPN. In this course, you learn how to use and deploy Enterprise Gateway. You also learn how to configure granular policy control over the resources device users can access.

Objectives

• Describe the different modes you can deploy Enterprise Gateway in a corporate network
• Setup and install Cloud Extender
• Enable and configure Enterprise Gateway in the MaaS360 portal
• Configure policies and content sources that control how devices access corporate resources

In this training, you learn about the Cloud Extender Certificate Integration module that you can use to integrate certificate authorities with IBM MaaS360 for advanced authentication schemes. You learn about how you can use this integration, its requirements, and implementation details.

In the lab, you learn how to configure MaaS360 Cloud Extender’s Certificate Integration module to integrate with a Microsoft certificate authority (CA) and provision identity certificates for mobile devices. When coupled with the Enterprise Gateway module and Secure Browser app, users can seamlessly authenticate and access corporate resources with a device certificate.

Objectives

• Create and enable a mobile device certificate template on a server that requests device identity credentials
• Replace the encryption template on the server with the mobile device certificate 
• Increase the password cache limit to avoid password cache errors on the server 
• Increase the size of the query string value to enable Cloud Extender to request certificates 
• Use the Cloud Extender Configuration Tool to configure the Certificate Integration module 
• Create a WorkPlace Persona policy that uses the device certificate to authenticate a device  
• Use a device to authenticate using the device certificate  
• Locate device certificate information in MaaS360 

This video series demonstrates integration between IBM MaaS360 and IBM QRadar SIEM. It includes the following demonstrations:

• MaaS360 and QRadar Integration overview
  
• Sending MaaS360 events to QRadar SIEM
  
• Installing the MaaS360 app
  
• Using QRadar Action Script with MaaS360 API

Prerequisites: This video series assumes that you have the following skills:

• Basic knowledge of QRadar SIEM concepts
• Basic knowledge of the MaaS360 portal
• Basic knowledge of Python scripting

For more information about these topics, visit the QRadar SIEM and MaaS360 roadmaps in the Security Learning Academy.

In this course, you learn how MaaS360 can integrate with behind-the-firewall resources using the MaaS360 Cloud Extender and leverage direct cloud-to-cloud integrations.

In this session from Virtual Master Skills University 2020, you learn how to configure SSO by integrating MaaS360 and IBM Security Verify.

When you finish installing the MaaS360 Cloud Extender, a message warns you to create a firewall exception rule for Cloud Extender's program folder. It is important to create this rule so that Cloud Extender can function as intended. In this video, you learn how to create an exclusion rule in Windows for the default program folder.

MaaS360 expert Matt Shaver shows you how to configure mail in MaaS360. In this video, you will learn what to expect from native mail clients, what are MaaS360 Secure Mail features, and how some practical tips can help with mailbox migrations.  The topics covered in this video include:

• Agenda
• Introduction
• iOS ActiveSync
• iOS Policy – mail configuration
• Settings for a specific mail client
• Identity Certificate
• Android ActiveSync
• MaaS360 email client
• Workplace Persona Policy: Configuration
• Workplace Persona Policy: Security
• Copying contacts
• SMIME encryption
• Report phishing settings
• Add multiple accounts to your configuration
• Q&A

 Duration: 54 minutes

In this video, MaaS360 expert Matt Shave provides an introduction to Windows 10 management. 

This video provides details about MaaS360 policy features and functionality, an overview of Enrollment Programs, and information on Application Distribution and Windows App Catalog.

Duration: 53 minutes

Learn how to prepare Microsoft Active Directory Federation Services (ADFS) to be used as the Identity provider for the  federated SAML authentication of devices and portal administrators in MaaS360.  You configure both ADFS  and MaaS360  to use Security Assertion Markup Language (SAML)  and then test portal administrator and device enrollments using this authentication.  Microsoft ADFS is used as the Identity Provider in this lab but any Identity Provider that supports SAML 2.0 can be used to achieve federated single-sign on in MaaS360.

Change can be difficult, but it doesn't have to be!

Find out how to make easier migrations using MaaS360 with the best practices, tips, and tricks shared in this interactive webinar. This topic provides an overview of key MaaS360 resources and MaaS360 migrations, as well as, details on Mobile Device Management (MDM) and mail migration. There is also a Q&A at teh end of this Open Mic session.

Matthew Shaver, Vlad Ilca

Matt Shaver, our IBM MaaS360 Knowledge and Content Manager, provides a deep dive into MaaS360 App and Doc Management. In this video, Matt gives a practical guide to deploying apps, shows how to manage enterprise and private apps, and provides tips and tricks for content distribution. This video covers the following topics: 

• Agenda
• Introduction
• App catalog
• Public applications in iOS
• AppConfig (iOS and Android)
• Enterprise App for iOS
• Apple Volume Purchase Program (VPP)
• Android Google Play
• Enterprise Apps for Android
• App distribution
• Docs and the Content Library
• Q&A

In this lab, you learn how to integrate IBM Security MaaS360 with Android Enterprise to enable and manage Android devices and apps in MaaS360. You configure the service and deployment settings in the MaaS360 portal, review Android Enterprise policy configurations, and approve Google Play apps to distribute through MaaS360. You also generate an enrollment request for an Android device, enroll the device in MaaS360, and activate the Work profile on the device.