Universal Policy Enforcement:
Gap-Free Protection for Endpoints and Networks

Check Out What's New

The Universal Policy Enforcement solution comprises a range of iPass connectivity and security services that can be used either standalone or in concert with one another to protect remote and mobile user devices and the corporate networks to which they connect:

Connectivity Services

The new Universal Connection option to the iPass Corporate Access™ service customers to extend secure access their corporate network to any Internet connection—even those not part of the iPass global virtual network. Users receive a consistent, streamlined login, while IT staff can take advantage of integrated policy enforcement and detailed user session data.

Security Services

SecureConnect and Auto-Teardown, standard features of the Corporate Access service, ensure an end-user's personal firewall and anti-virus software are up and running both before granting Internet access and throughout their entire session. If they're not, iPassConnect can automatically launch the applications to ensure the endpoint is protected throughout the connection process. If the required applications can't launch or cease running at any time, the Internet session can be terminated.

The Endpoint Self-Quarantine service enables iPassConnect to apply different firewall rules based on an endpoint device's connectivity state. It can be used to restrict an endpoint device's Internet communications to specific iPass or enterprise hosts while policy checkpoints are conducted and corrective actions taken, and open access only once policy compliance has been established.

The Endpoint Policy Management service provides vulnerability assessment and remediation of endpoint device software. This mobile-friendly service can distribute Windows OS patches, anti-viruses definition files and other security updates. It can be used on a standalone basis or with iPassConnect and DeviceID to enforce endpoint software policies. Because it's client-driven, Endpoint Policy Management ensures checks and updates occur for every Internet session.

The DeviceID service uses a patented, one-time-password mechanism to restrict VPN use to endpoint devices that pass a series of policy compliance checkpoints, and stops users from establishing a VPN session without using iPassConnect.

How It Works

The new Universal Policy Enforcement solution works by tightly linking security and connectivity. It can force remote and mobile devices through a series of policy checkpoints and corrective actions before giving them access to the Internet or your corporate network via VPN. Internet access is controlled by changing profiles on the personal firewall, while VPN access is controlled through a one-time password mechanism that's seamlessly integrated into the authentication process.

Policies include pairing specific users with specific devices, completing endpoint vulnerability assessment and remediation, and the continuous operation of endpoint security tools such as personal firewalls, anti-virus software and VPNs throughout the connectivity session.

Things Are Looking Good for Users

The Universal Policy Enforcement solution maintains iPass' leading end-user experience, ensuring continued workforce productivity:

• No user configuration or intervention required, as iPass services handle all connection and policy enforcement processes
• All Wi-Fi hotspots and mobile data connectivity is auto-detected and presented to the user, complete with signal strength and security information
• Automatic browser launch for non-iPass Wi-Fi networks requiring a separate login simplifies authentication to both the Internet and VPNs, so security policies are always enabled.
• User devices are updated on the fly by Endpoint Policy Management; users aren't forced to bring them into the office or even connect to the corporate network to get an update, nor are they forced to connect to the corporate network to get the update.
• Updates are optimized for mobile connections, resuming where they left off after a disconnect, and dynamic bandwidth throttling allows users to be productive if patches are distributed in the background.

Catching the Eye of IT Staff

Like all iPass solutions, Universal Policy Enforcement is also easy on IT:

• Centralized management and control are provided via the iPass Portal
• Integration with leading authentication, personal firewall, anti-virus and VPN solutions helps protect endpoint devices
• Designed for integration with leading network enforcement solutions such as Cisco NAC, Microsoft NAP and TCG Trusted Network Connection to helps protect the corporate network.

Seeing Is Believing

Using the iPass Universal Policy Enforcement solution - part of iPass' vision of trusted mobility - you no longer have to sacrifice security for access. You can have it all. You can give your distributed and mobile workers convenient, ubiquitous access to the Internet and your corporate network, without settling on security, user productivity or management control.

For more information, go to the Universal Policy Enforcement page or contact your iPass Account Manager who can arrange a live demonstration and provide you additional product and implementation details.

"iPass' Endpoint Policy Management solution has allowed UGS to simply and quickly update security and other software packages, which ultimately helps impact profitability.

Additionally, by giving us the ability to accurately track the state of the device, to include security updates and up-to-date software applications running with the right configurations, iPass has helped us control costs and save hours of manual labor by our IT staff. These capabilities help make Endpoint Policy Management an effective tool for protecting the bottom line at UGS."

- Brian McEvoy

Director of Enterprise Systems Engineering,
UGS

	»	iPassConnect: End User Experience