DATASHEET

Mobile Security Made Simple with Ivanti
Enabling complete end-to-end mobile threat protection

Ivanti

MDM
Modern Device Management▪ Ensure privacy and compliance inorganizations primarily concerned aboutprotecting sensitive data
▪ Facilitate multi-device, multi-OS, multiapp management from a single console▪ Support broad use cases across verticals▪ Separate business from personal using
containers

ivanti.com

Ivanti+MTD
Mobile Threat Defense▪
▪
▪
▪

Zero-day detections of known and unknown
attacks
Initial risk assessment of environment
Real-time remediation and MDM actions
Real-time detections of advanced device,network, application and phishing threats
Detailed threat forensics with context
information, export to SIEM or threat hunting
tools

Ivanti and Lookout have partnered together to offer an allencompassing enterprise mobile security solution thatsafeguards employees and their Everywhere Work fromevolving threats. With comprehensive protection at every
level, including device, network, and application, the solution
defends against phishing attempts and prevents attacks
before they can do harm.
By bringing their expertise together, Ivanti and Lookout
empower enterprises to manage and secure a wide range ofmobile devices against virtually any type of attack. Lookout
continuously analyzes and detects threats in real-time,
providing Ivanti with valuable visibility to enforce policies
and minimize the risk of data breaches. With Ivanti and
Lookout, enterprises can mitigate the risks of mobile
vulnerabilities and keep their networks, assets, andemployees safe.
The integrated solution provides IT security administratorswith a way to safely enable both Government FurnishedEquipment (GFE) and Bring Your Own Device (BYOD) andstrike the balance between empowering mobile employees tobe more productive with the device of their choice, while atthe same time securing mobile devices and the enterpriseagainst advanced threats.

How Lookout integrates with Ivanti:
Ease of deployment and upgrades

Key benefits
The partnership between Lookout and Ivanti introduces apowerful endpoint protection solution that makes mobile
security easy and efficient. By integrating Lookout's
technology with Ivanti MDM, businesses can gain real-time
visibility into mobile risk, and through machine learning
engines fueled by Lookout's global sensor network, can stay
one step ahead of the evolving mobile threat landscape. With
integration into the Ivanti MDM client, the enrollment andenforcement policies are simplified, driving to 100% user
adoption.

Regulatory compliance
NIST 800.53
Special Publication 800-53, Revision 4, provides a more
holistic approach to information security and risk
management by providing organizations with the breadthand depth of security controls necessary to fundamentallystrengthen their information systems and the environments
in which those systems operate – contributing to systems
that are more resilient in the face of cyberattacks and otherthreats. Lookout analyzes network connections and canaccurately identify man-in-the-middle attacks, hostcertificate hijacking, hijacked SSL traffic, and TLS protocol
downgrades.

NIST 800.124
NIST Special Publication 800-124 Rev. 2 section 4.2.3
states: “MTD systems are designed to detect the presence ofmalicious apps, network-based attacks, improper
configurations and known vulnerabilities in mobile apps or
the mobile OS itself.” Lookout provides comprehensive
protection against the entire spectrum of mobile risk, which
includes threats, vulnerabilities, and configuration risks
across the four primary threat vectors - phishing, app,device, and network threats. In addition, the Lookout
platform uses artificial intelligence to analyze data fromnearly 200 million devices and over 100 million apps toprotect you from the full spectrum of mobile risk.
General Data Protection Regulation (GDPR)
GDPR offers a comprehensive framework for protecting EU
citizens' data privacy and ensuring security by imposing
strict procedural and technical requirements. Complying
with GDPR necessitates adherence to data protection
principles, such as data minimization, accuracy, storage
limitation, and secure data processing. Lookout provides
essential security features that offer in-depth visibility into
various mobile threats, vulnerabilities, and risky behaviors
jeopardizing data security. With policy-based protection,
Lookout addresses mobile risks at scale, enablingorganizations to establish policies for timely threat
remediation, minimizing data-leak risks, and upholdinguser privacy.

Lookout is already embedded into the Ivanti MDM client. Thismeans the solution is already deployed to every device, andonly requires activation to start protecting users. The
configuration is done by adding Ivanti MDM to the Lookout
Console and enabling activation from the MDM console tostart protecting devices. No user interaction is required, andno new application deployment is needed.
Protect your corporate infrastructure
When Ivanti Mobile Threat Defense detects that a device has
been compromised, it can provide quick remediation tothwart the attack. Based on the attack and the setting, Ivanti
can perform myriad protective actions including terminating
the network connection, denying specific IP/domains andenacting specific quarantine actions. In addition, the Ivantiserver can enact risk-based compliance policies to remediate
depending on the severity of the threat. The policies cantemporarily disable the mobile device’s connections tocorporate services (email or other apps, Wi-Fi and VPN) or
even remove enterprise applications from the device. These
actions stop the spread of the infection and prevent risk tocorporate data.
Alerting and reporting
Ivanti provides comprehensive mobile threat forensics alongwith configurable end-user notifications and administrator
alerts by attack type to suit the needs of any enterprise.
Privacy data collection policies are provided to meet regional
regulations as well.

UEM? MTD? Why You Need Both! | DATASHEET2Capability
Ivanti MDM

Ivanti MTD

Support for iOS and Android devices.
Provide initial vulnerability risk posture for OS/device, network, apps and phishing.
Detect if device has proper physical security enabled (pin code, device-level encryption).
Detect if device is jailbroken/rooted by user (using known hash values and file location).
Provide forensics into the tools and techniques of a device compromise or attack.
Detect OS/Kernel and USB exploitations, profile/configuration changes, system tampering.
Detect elevation of privileges attacks.
Detect network attacks (man-in-the-middle, rogue Wi-Fi and cellular networks).
Detect SSL stripping, fake SSL, attempts to intercept SSL traffic.
Detect attackers conducting reconnaissance scans.
Detect phishing, smishing, URL phishing, tiny URL, etc.
Corporate app delivery and removal.
Secure corporate document sharing.
Secure line-of-business apps.

UEM? MTD? Why You Need Both! | DATASHEET

3CapabilityIvanti MDM

Ivanti MTD

Ivanti MDM

Ivanti MTD

Detect malicious apps, known and unknown malware, dynamic threats using download and execute.
Revoke access to non-compliant mobile devices.
Provide detailed mobile threat forensics.
Enforce risk-based policy including lock or selective wipe for compromised devices.
Provide instant remediation once an attack is detected.
Scan in-house developed apps for privacy and security concerns/risks.
Receive privacy and security information from apps that have been installed on the device.

Threat detection

Host-related critical and elevated threats
Android device – possible tampering
Abnormal process
Developer options
Device encryption
Device PIN

UEM? MTD? Why You Need Both! | DATASHEET

4

Threat detection
Ivanti MDM

Ivanti MTD

Host-related critical and elevated threats
Device jailbroken / rooted
MDM jailbreak/root detections are simplistic and easy to bypass. In addition, MDM does not provide any forensic visibility into the tools and techniques used in theattack.

Elevation of privilegesFile system changed
Side loaded apps
SE Linux disabled
System tampering
This is an advanced compromise of the device that may or may not use the additional step of jailbreaking or rooting the device.

Suspicious iOS app
Suspicious Android app
Untrusted profile
USB debug mode on
Vulnerable Android version
Vulnerable iOS version

UEM? MTD? Why You Need Both! | DATASHEET

5

Phishing detection and prevention
Always-on detection and blocking of phishing URLs.
Time-of-click phishing detection stops phishing attacks in-motion.
Network Related Critical & Elevated Threats
MiTM
MiTM - ARP
MiTM – ICMP REDIRCTMiTM – SSL strip
MiTM – fake SSL stripSSL/TLS downgrade

UEM? MTD? Why You Need Both! | DATASHEET

6About Ivanti
Ivanti makes the Everywhere Work possible. In theEverywhere Work, employees use myriad
devices to access IT networks, applications and data to stayproductive as they work from anywhere. The Ivanti

ivanti.com

automation platform connects the company’s industry-

1 800 982 2130

leading unified endpoint management, zero trust security

sales@ivanti.com

and enterprise service management
solutions, providing a single pane of glass for enterprises toself-heal and self-secure devices, and self-service end
users. More than 40,000 customers, including 78 of theFortune 100, have chosen Ivanti to discover, manage,
secure and service their IT assets from cloud to edge, anddeliver excellent end user
experiences for employees, wherever and however theywork. For more information,
visit ivanti.com

Copyright © 2021, Ivanti. All rights reserved. IVI-2559 04/21 RD/FG