Mobile Threat
Defensefor Beginners

GUIDE
It’s a fact: Apple builds one of the strongest out-of-the-box
secure platforms on the market. However, it is a growing
platform target for determined attackers, and because of this,organizations must be equipped to respond to and fend off
the threats of today and the future.
Common attack campaigns including phishing, malware andvulnerable apps are used to exploit devices and leverage
access to company resources and sensitive data, such as:> Exfiltration of confidential information> Obtain access to corporate services> Gather privacy data from users> Intercept network communications
Jamf secures your mobile endpoints against compromise
through threat detection and prevention of zero-day phishingand malware attacks. This is among the top concerns for allorganizations, especially those that have adopted remoteor hybrid environments, given the rise in targeted incidents
against mobile devices from threat actors.

IN THIS GUIDE, WE’LLDISCUSS THE FOLLOWING:

1

Comprehensive threat
detection and prevention

2

Strong protections forevery use case3

Real-time reporting
capabilities

4

Policy controls andconditional access5Unified operations
management

M obile Threat Defense for Beginner s | Page 2

APPLE IS A GROWINGPLATFORM TARGETFOR DETERMINEDATTACKERS...

...AND THEY DON’T DISCRIMINATE.
Enter Jamf Protect — the purpose-built solution toprotect mobile devices and your users from malicious
threats while maintaining low overhead and a small
network footprint with minimal impact to device
performance and the end-user experience.
Organizations that deploy macOS devices to theirusers rely on Jamf Protect to provide endpoint
protection to safeguard their fleet against security
threats, preventing malware and providing insight
into device health. But what about mobile devices,such as iOS, iPadOS and Android devices? Whatkind of endpoint security is available for mobiledevices that not only meets their unique needs but
also integrates with Jamf Pro for an comprehensive
management solution?

M obile Threat Defense for Beginner s | Page 3

“PROTECTYA NECK”

Harking back to the prolific words of the Wu-Tang Clan, the headingrefers to essentially the protection of sensitive assets by protecting
the core. For the purposes of this guide, the core is mobile devices.
After all, they are the conduit by which attackers will target in order toaccess sensitive data.
41% of organizations experienced a malware incident on remotedevices, which is not only a startling amount but also a sizable
increase from the prior year, according to the Cloud Security
Report 2021. Read our Security 360 report to learn about this year’s
security trends and risks.
For those not sure as to what’s behind the spike in incidents, theanswer is both simple and complex. The erosion of the network
perimeter due to a shift to remote or hybrid work environmentsfinds users utilizing mobile devices more to remain productive whileworking away from the office. That’s the simple part. The complex partis how organizations transform their infrastructure to keep devices
protected and data secured.
Minimizing the complexity involved, Jamf’s approach is a cloud-based
one, mixing powerful, advanced security technologies with extreme
flexibility and scalability. Including real-time monitoring, detection andreporting capabilities, which allows IT and security teams to monitor
the health of their entire fleet.

M obile Threat Defense for Beginner s | Page 4

NETWORKPROTECTION

Among the multiple security threats modern enterprises are facing,phishing is only one of those types of threats, yet arguably it remains
the greatest due to its targeting of the weakest link in the security
chain: the user. The sad truth is that, even with well-meaning andtrained users, the margin of error is still too high, which means
success rates of compromise are high, therefore attackers willcontinue to leverage them in their attack chain.
With in-network protection, you can actively block zero-day threats,
like phishing websites, in real time. In doing so, devices areprotected from the effects of these campaigns before triggering an
exploitative attack. By preventing the device from accessing thesemalicious domains across all communication types: (wired, Wi-Fi orcellular) organizations can secure their users and endpoints.

M obile Threat Defense for Beginner s | Page 5

EXPANDINGCAPABILITIES

Built with extending functionality in mind through integration witha vendor’s API framework, Jamf Protect has more Unified Endpoint
Management (UEM) and Security Information and Event Management(SIEM) partnerships than other security solutions. What this means
for IT and security is that they can maximize the existing investment
in security and device management appliances, apps and services
to take advantage of threat insights, remediation workflows
and automation.
One such excellent example of integration is leveraging the Jamf risk
API alongside the features of Jamf Protect to enable unparalleledcommunication. With this in place, data is shared between both
systems in real time, allowing for customized reporting andremediation on the health of your organization’s mobile devices.

M obile Threat Defense for Beginner s | Page 6

ADAPTIVEACCESSOne of the main reasons access-related threats are so effective isthat if a device is compromised and there aren’t any indicators thatare visible to the user (the device continues to operate seemingly
normal), the user will still have access to a resource. The device willprocess the request and access will be granted, thereby compromising
the resource.
Jamf simultaneously combats this and elevates your security postureby permitting only secure connections and trusted devices to accessorganizational resources. How you ask?
By continuously monitoring telemetry data and contextual inputs
unique to each device for anomalies.

Jamf Protect works tirelessly
to thwart the myriad list of
cybersecurity threats attacks
that show no signs of slowing
down and continue to plague
the mobile security landscape.

If it is determined that the endpoint is high-risk or compromised, Jamf
Protect prevents access to the resource(s) through enforcement ofcustomized policies.

M obile Threat Defense for Beginner s | Page 7

ADVANCEDMACHINELEARNING

After reading some of what Jamf can do to protect your enterprise andmobile device fleet, we’ll dive a little deeper into the underpinningsof the software to give you a better look at how it weaves its magic
to keep devices safeguarded from threats. Not features per se, butrather some of the built-in core defensive technologies that power thefeatures mentioned above.
Let us introduce to you: MI:RIAM. Not a replacement for Siri or
the newest member of the Wu-Tang Clan, but rather an advanced
intelligence engine that works in real time to identify the broadest range
of known and zero-day threats. By utilizing the largest set of threat data,
MI:RIAM collects information from 425 million sensors worldwide as
input for its algorithms, using advanced data science to provide realtime insight into the latest threat intelligence and active risks.

M obile Threat Defense for Beginner s | Page 8

ALL DEVICESWELCOME

Only have iOS and iPadOS devices in your fleet? That’s perfect. Jamf
Protect has exactly the type of security protections necessary to keep
your Apple devices and user base protected against current andemerging threats.
Have other devices in your mobile device fleet, as well? That’s great
too! Jamf secures Android and Windows operating systems and works
just as hard to keep all your mobile devices hardened. Jamf makes it
possible for organizations to support multiple ownership models, like
corporate-owned or BYOD programs, without compromising on security.
As a user, you want to know that you’re protected. As a member ofyour IT or security team, you want to know in what ways your users
are protected. But when it comes to malicious actors, the less theyknow the better it is for maintaining your network’s security posture
and, ultimately, keeping information safe. And there are several typesof information you’ll want to keep safe at all costs to maintain its
integrity, keep IT and security teams alerted to the latest health data ofcompany endpoints.

M obile Threat Defense for Beginner s | Page 9

USER
PRIVACY

Personally-Identifiable Information (PII), including Personal Health
Information (PHI) are among the grails of data types that threat actors
seek to obtain. It’s a cyclical effect: the more they gather directly feeds
how they will continue the attack while providing them a means to anend in their criminal endeavors.
Thankfully, Jamf safeguards online privacy through encrypted
communications and protection against phishing attacks. This applies
not only to the personal data of your users but also to sensitive
information that may be required to adhere to regulatory compliance.
The advanced privacy features and policy controls prevent access tocorporate resources and data by risky users or devices.

M obile Threat Defense for Beginner s | Page 1 0

REAL-TIMEINSIGHTSIT and security teams can obtain detailed reports relating
to endpoint health utilizing the default reporting featuresthat are included or customize details by tuning them to fit
the specific needs of your organization. Tailoring reporting
features takes Jamf Protect one step further, providing
admins real-time data within the console, or exporting it
to an SIEM partner through the built-in integration feature
to visualize data on dashboards, or leveraging the API tointegrate with a unified management solution, like pairing
it with Jamf Pro, to stream data between the software,
enabling automated device management and remediationof detected endpoint issues.

M obile Threat Defense for Beginner s | Page 11

There’s so much that you can do for your organization and your users, tokeep data, devices and people protected. There was too much for us toeven address in this e-book. So here’s your next step:
Learn more by being hands-on with a free trial. You can also work withyour preferred reseller to see what’s possible with Jamf.

Request Trial

We’re excited for you to get started.

www.jamf.com© 2023 Jamf, LLC. All rights reserved.