Jamf touts huge increase to enterprise safety at JNUC
Jamf opened its annual JNUC occasion for Apple admins with a plethora of recent bulletins centered on gadget administration and safety, together with a brand new Jamf Trust app and extra particulars on its ZecOps acquisition.
Jamf
Jamf opened its annual JNUC occasion for Apple admins in the present day with a slew of bulletins centered on gadget administration and safety, a brand new Jamf Trust app, additional info on its not too long ago introduced ZecOps deal and different updates more likely to be of curiosity to Apple IT professionals.
The firm additionally dedicated to supporting Microsoft Device Compliance on Macs later this 12 months, with assist for Google’s context-aware zero belief framework (BeyondCorp) on iOS gadgets in early 2023.
What drives the Jamf manner?
In advance of JNUC, I spoke with Jamf CEO Dean Hager, who defined the philosophy behind what the corporate is asserting. Ultimately, it’s a continuation of Jamf’s core mission, which is to carry complicated enterprise tech integration into the twenty first century by guaranteeing not solely that it helps Apple’s tech, however that its implementation is married to the type of client simplicity you anticipate on Cupertino’s platforms.
“We’ll kick off the event by asking two simple questions: ‘Do your users love their work technology?’” he said. “‘Does your organization trust all the access that is coming in from that technology?’ And it’s our view that you should see a resounding ‘yes’ to both. We believe that through the melding or the combining of management, software and security software, we feel like that combination is what makes that love and trust possible.”
Jamf additionally confirmed that it now manages 29 million Apple gadgets worldwide with 69,000 prospects — that’s up 15% since earlier this 12 months. Complex simplicity makes a distinction.
Here’s what Jamf unveiled in the beginning of JNUC 2022
What is Jamf Trust?
The Jamf Trust app binds consumer id to a tool in order that Jamf’s safety companies are dynamically configured in keeping with consumer id and position. This casts a protecting cloak throughout the enterprise, putting protections round software entry and making highly effective enterprise-class safety client easy.
What this implies in impact is that Jamf can now guarantee macOS and iOS gadgets are configured accurately and secured in opposition to cyber-attacks from first boot.
Jamf
Jamf Trust in motion. The system can robotically react to an incoming menace, warn the consumer, clarify the issue and alert the safety monitoring system.
What’s new in Jamf Protect?
Next month, Jamf Protect will acquire wealthy endpoint telemetry knowledge assortment together with a brand new offline deployment mode that streams telemetry knowledge on to a SIEM (Security Information and Event Management) system for purchasers with high-compliance necessities.
To assist this new function, the corporate has already scanned over 430 million distinctive domains. “By measuring a multitude of dimensions of these sites, including top-level domains, subdomain entropy, domain compositions and brand impersonation, Jamf has been able to identify and block more than 122,000 zero-day phishing attacks just in the last year,” the corporate stated.
Powerful distant entry
Coming in early 2023, Jamf plans a brand new Remote Access function that can empower IT admins to authenticate and take distant management of any Mac of their fleet — each bodily and digital — straight from inside Jamf Pro.
Making app deployment easy (and safe)
Jamf already ensures its methods are prepared to put in when Apple’s personal working methods ship. Last 12 months, it started work to make third-party apps simpler to handle and replace with App Installers within the firm’s App Catalog.
The firm now displays greater than 1,000 titles which can be often utilized by its prospects with greater than 100 obtainable App Installers. IT can use the latter to put in absolutely patched and up to date variations of the apps they want.
Since it may possibly occur on the MDM finish, endpoints are protected in opposition to unintentional set up of unapproved or unverified apps. The firm is making ready to introduce enhancements in its App Installer consumer notifications system, together with simplifying App set up inside Self Service, to make sure solely apps related to the consumer and approved by IT are displayed of their custom-made app catalog.
Maximum safety? Zero belief?
The firm additionally improved its patented Smart Group expertise by synthesizing a number of layers of information, together with consumer, gadget, and new-risk knowledge into safety workflows that allow organizations to establish threats and act on menace knowledge robotically. Among different issues, this exploits Jamf’s capacity to dam entry to a tool or to particular gadget capabilities if a compliance downside is detected.
The firm additionally hinted at extra work with cloud id suppliers reminiscent of Okta. It can now implement use of Private Access to make sure solely protected gadgets with encrypted knowledge can run enterprise apps, whereas robotically blocking compromised customers and gadgets.
As famous, the corporate can also be seeking to ease ache factors in authorization. Microsoft Device Compliance shall be obtainable to Jamf-protected Macs later this 12 months, whereas Google’s context-aware zero belief framework (BeyondCorp) shall be obtainable to iOS gadgets in early 2023. These protections are already obtainable on iOS and Mac, respectively.
Jamf says the mix of all these new zero-trust capabilities will ship a number of layers of organizational safety via gadget well being scores and Smart Groups to dam non-compliant utilization at gadget, community, and cloud layers.
Hager defined the method maximizes the potential of zero belief. “We would rather talk about trusted access,” he stated. “That’s where the Microsoft and the Google integration comes in.
“Because, let’s face it, if Jamf senses that something is wrong with a device or person, we can block that device immediately. We can shut off that device at the network level. With our private access, or Microsoft and Google through their integration with us, they can shut off access so we actually have the ability to block access at the device level, at the network level, and at the cloud level. And honestly, I don’t know of anybody else in the industry that can do that. And as a result, an organization can trust every point of access that’s coming in.”
Hager additionally identified how Jamf Protect can create viable obstacles between private and enterprise use of a tool, defending privateness whereas defending the gadget – and the enterprise. It’s all about sustaining Apple’s “relentless focus on the person” within the enterprise, Hager stated on stage at JNUC.
Making plastic entry badges historical past
Those plastic entry playing cards/badges everybody loses must be consigned to the landfill of historical past. Starting subsequent 12 months, Jamf will combine SwiftConnect’s cloud platform in order that organizations can present staff with digital worker badges accessed via Apple Wallet on the iPhone and Apple Watch and authenticated via the worker’s cloud id. It principally means your watch or iPhone shall be your workplace key.
Reassuringly, this integration between Jamf Trust and SwiftConnect’s cloud platform will even combine with cloud id, credential administration, and entry management business leaders together with Microsoft, Okta, Google, HID, Lenel, Genetec, and others.
Jamf embraces Declarative Device Management
Apple will assist Declarative Device Management in Macs beginning subsequent 12 months.
Coming subsequent month, Jamf will assist this performance. It means gadgets will proactively report their standing in real-time, which suggests IT can automate or make higher choices round gadget safety. In associated information, Jamf and AWS final week introduced their new partnership to robotically enroll digital EC2 Macs into Jamf Pro when they’re provisioned via the AWS portal.
There is extra coming from the occasion, so keep tuned as I dig deep into the bulletins from the present.
Please comply with me on Twitter, or be part of me within the AppleHolic’s bar & grill and Apple Discussions teams on MeWe.