DATASHEET

Ivanti UEM for Android
The Everywhere Workplace
The challenge■ Secure sensitive data on Android devices

while maintaining user privacy.
■ Ensure the right applications are available tousers.
■ Lack of technical expertise within an

organization to onboard/scale Android
deployments.
■ Identify the right deployment modes todeliver critical business value with superioruser experience.
■ Consistent management across Android

devices from different manufacturers suchas Samsung, Pixel, Zebra and more at scale.

Ivanti makes the Everywhere Workplace possible.
Our comprehensive unified endpoint management(UEM) platform is purpose-built to secure Androidenvironments. Manage devices, applications
and content with ease – with access to our UEM
technology and integration services around the world
thanks to our global partner network.
Scalability. Security. Ease. Global Expertise. These
are just a few of the reasons organizations trust Ivanti
to help accelerate their Android adoption. With 2.5
billion monthly active devices, Android has become

As the first provider to deliver an enterprise app

the number one mobile platform for consumers. For

storefront, BYOD privacy controls and certificate-enterprises, Android powers the widest range ofbased identity management for Android, Ivanti is also

deployments including single-use, dedicated use

one of the first UEM providers to support the Androidcases, kiosk mode, rugged devices for frontline

enterprise platform.

workers and high-end knowledge productivity tools.

ivanti.com

A flexible fit
Ivanti UEM for Android supports a broad range ofuse case scenarios. Segment users by role anddevice ownership. Company-owned, personallyowned (BYOD), Corporate-owned personally enabled

Capabilities■ Broad multi-vendor support by securely enabling■ Protect data-at-rest through encryption andDLP controls.

Android devices and apps.
■ Streamline onboarding by using Samsung Knox

■ Preserve the native device experience andkeep employees happy.

Mobile Enrollment (KME) and Google Zero Touch(COPE) frontline and task- worker dedicated devices

Provisioning with Ivanti UEM solution.

– with Ivanti for Android, select what’s best for yourorganization and extend employee productivity with

■ Enforce security and privacy policies.

■ Maintain granular app-level control over theentire lifecycle.

■ Separate security domains for work and personal

data on the device.

the right tools and the right devices for a secure
mobile transformation.

Consistent IT management acrossdisparate devices at scale

Key use cases■ Ensure privacy and complianceinorganizations tasked with protecting

Android enterprise delivers a deeper and moresensitive data. Secure business data on

consistent security model to enterprise customers

any endpoint and separate business andwhile ensuring user privacy. Ivanti supports thispersonal data on various endpoints including

model. Using Ivanti’s UEM console, IT can securely

Android devices.

distribute enterprise apps and push configurations
to Android devices. These features not only simplify■ Enable multi-device, multi-OS, multi-app

management from a single console. In aIT management, but they also reduce Android

mixed-device environment with Android

fragmentation by enabling more consistent app

based devices (Samsung, Google, Pixel,distribution and security.

Zebra, Oculus, Honeywell etc.), iOS,
macOS and Win 10 laptops, unified device
management is top priority.
■

Empower Android frontline workers.
Support the field, fleet and mobile workers
in healthcare, transportation, manufacturing■Provide superior end user choice and aseamless user experience. Device choice
and user experience are essential for
productivity and compliance. Ivanti UEM
provides streamlined onboarding and asuperior on-device experience.

■ Industry security certifications for UEM.

Gain industry-standard security certifications
such as FIPS 140-2 Validated Container,
Common Criteria MDM PP V3.0, DISA STIG,FedRAMP and National Cryptologic Center –Assurance High.
■ Provide security automation for device

compliance. Automated tier compliancequarantines or deletes all business dataor apps on compromised devices withoutmanual IT actions.

and other industries who use rugged
devices or devices in kiosk mode.

Ivanti UEM for Android | DATASHEET2

A secure foundation for Android inthe enterprise
How does Ivanti UEM address enterprise security
concerns so well? By enabling a containerizedenterprise persona that separates personal andprofessional apps and content – all while preserving
the native user experience. Whether the device iscorporate-owned or employee-owned as part of a
BYOD program, IT has full control over the enterprisecontainer. The administrator can set and manage
app and data-level policies and perform selective orcomplete wipes of the container.
Long story short: Ivanti UEM for Android gives IT
comprehensive data security controls while the user
retains a seamless experience across devices.

Features include:Device security■ Work profile on company-owned employee

enabled devices for better user privacy.
■ Secure Android devices with passcode andbiometric policies.
■ Protect unauthorized access by locking down

hardware access.
■ Kiosk mode lockdowns, with support forshared devices.
■ Control what wi-fi networks the device canconnect toData security■ Separate app and user data encryption.
■ Individual certificate-based security for email,

Wi-Fi, and VPN.
■ Secure via single or Ivanti Zero sign-on.
■ Selective quarantine/wipe of business appsand data.
■ 5G slicing support

Data loss prevention (DLP)■ Encrypted attachment control.
■ Screen capture control.
■ Copy/paste control.
■ Control what information is shared between

device and work profile

Secure network access■ Sentry acts as an email and content in-line

gateway that manages, encrypts and securestraffic between the Android device and back-end
enterprise systems.
■ Tunnel is a multi-OS per-app VPN solution thatallows organizations to authorize specific mobile
apps to access corporate resources behind thefirewall without requiring any user interaction.

Complete device lifecycle
management
Onboarding a fleet of Android devices manually isa tall order. This is made especially challenging by
the long list of Android device vendors including
Google, HTC, LG, Samsung, Zebra, Honeywell andmore. Zero touch enrollment with Ivanti UEM forAndroid automates onboarding, user provisioning,
configuration, application deployment and security
and control of Android endpoints for users, including
remote workers. With Ivanti for UEM enrollment you
can also:■ Provision the devices in specific modes basedon the privacy/security requirements.
■ Deploy and preconfigure apps customize toyour needs.
■ Reduce IT needing to physically preconfigure

each device while giving the user a white glove
experience.

Ivanti UEM for Android | DATASHEET

3

Using corporate-owned devices?

Comprehensive XR and VR device management

With Ivanti UEM for Android, business apps are inside

Maintain both security and the native user experience

including next-generation AOSP devices

a secure container with data encrypted, protectedwith Ivanti UEM. Here’s what’s possible:■ Automate user provisioning when users log intothe device.
■ Support provisioning of corporate-owned, kiosk

or single App mode, and shared device use cases
across your organization.
■ Centrally configure and push user email, Wi-Fi andVPN settings.
■ Set device-security standards.
■ Track device inventory and details.
■ Seamlessly install business applications to thedevice.
■ Automate application and Android updates.
■ Wipe corporate data off a device at the end of thedevice lifecycle, employee termination or loss ofdevice.
■ Unattended remote-control capabilities to support

devices even when the user is unavailable.
Examples of zero touch enrollment forAndroid vendors:■ Google Zero Touch Provisioning (ZTP): Enables

an IT administrator to mass deploy configured,managed, and corporate-owned devices.
■ Samsung Knox Mobile Enrollment (KME): Provides

automated enrollment of Samsung Galaxy devices■ Support file transfer for business apps, firmware

files and any type of files up to 10GB
■ Seamless in-house app distribution■ Support multiple versions■ No limits on APK size
■ Apps distributed via Content Delivery Network(CDN)■ Support deployment in-house and preconfigured

applications and updates■ Secure apps with per-app encryption with IvantiTunnel■ Support certificates and certificate authentication■ Over-the-air updates, control and VPN

configuration■ Remote lock and wipefrom unauthorized access and wipeable. A single
container passcode secures access to business apps,and users can easily access and share data between
apps. The Ivanti platform manages all containerizedapps for centralized policy management, supporting
native Android workflows and a productive mobile
experience for users.

Additional highlights include:■ Secure, identity-based delivery of in-house andGoogle Play Store apps through the Apps@Work
private app storefront.
■ Improved productivity via secure user apps:- Email+ for containerized corporate email, calendar
and contacts.
- Docs@Work for secure document storage.
- Help@Work to provide remote access for faster

Application management
App productivity is key to worker productivity, andthat’s why Ivanti offers the most comprehensive
platform for mobile application management onAndroid devices. Ivanti supports managed Google
Play or Apps@Work for app distribution and discovery,
data security with native enterprise containers
or AppConnect and AppConfig for an industry-

helpdesk resolution of issues.
■ Selective wipe of business apps and apps data on

the Android devices.
■ Allow/deny list of apps to protect against

inappropriate access.
■ Containerization and dynamic policy to protect

data-at-rest and enable compelling app-baseduser experiences through AppConnect.

standard means of delivering secure configurations toenterprise apps.

capable of Android Enterprise (AE).

Ivanti UEM for Android | DATASHEET

4Ivanti unified endpoint management
Device management and security

Ivanti Neurons
for MDM

Ivanti Neurons for
MDM Premium

Security and management. Secure Secure and manage endpoints running Apple iOS, macOS, iPadOS, Google Android, and Microsoft Windows operating systems.
Available on-premises and as a cloud service.
Mobile application management (MAM). Secure business apps with AppStation on contractor and employee devices without requiring device management.
Easy onboarding. Leverage services such as Apple Business Manager (ABM), Google Enrollment and Windows AutoPilot to provide users with automated deviceenrollment.
Secure email gateway. Sentry is an in-line gateway that manages, encrypts, and secures traffic between the mobile endpoint and back-end enterprise systems.
App distribution and configuration. Apps@Work is an enterprise app storefront that combined with Apple Volume Purchase Program (VPP, facilitates the secure
distribution of mobile apps. In addition, capabilities such as iOS Managed Apps and Android Enterprise allow for easy configuration of app-level settings andsecurity policies.

Secure Connectivity
Per app VPN. Tunnel is a multi-OS VPN solution that allows organizations to authorize specific mobile apps to access corporate resources behind the firewall
without requiring any user interaction.

Conditional access
Trust Engine. Combine various signals such as user, device, app, network, geographic region and more to provide adaptive access control.

Passwordless user authentication. Passwordless multi-factor authentication uses device-as-identity for a single cloud or on-premises application.

Ivanti UEM for Android | DATASHEET

5

Ivanti unified endpoint management (continued)
Scale IT operations

Ivanti Neurons
for MDM

Ivanti Neurons for
MDM Premium

Helpdesk tools. Help@Work lets IT remotely view and control a user’s screen, with the user’s permission, to help troubleshoot and solve issues efficiently.

Reporting. Gain in-depth visibility and control across all managed devices via custom reports and automated remediation actions.

Secure productivity
Secure email and personal information management (PIM) app. Email+ is a cross-platform, secure PIM application for iOS and Android. Security controls include
government-grade encryption, certificate-based authentication, S/MIME, application-level encryption and passcode enforcement.
Secure web browsing. Web@Work enables secure web browsing by protecting both data-in-motion and data-at-rest. Custom bookmarks and secure tunnelingensure that users have quick and safe access to business information.
Secure content collaboration. Docs@Work allows users to access, create, edit, markup and share content securely from repositories such as SharePoint, Box,
Google Drive and more.
Mobile app containerization. Deploy the AppConnect SDK or app wrapper to provide an additional layer of security for your in-house mobile apps, or choose fromour ecosystem of AppConnect integrated apps.
Derived Credentials. Support two-factor authentication using common access cards (CAC) and personal identity verification (PIV).

Ivanti UEM for Android | DATASHEET

6

About Ivanti
Ivanti makes the Everywhere Workplace possible. In
the Everywhere Workplace, employees use myriad
devices to access IT networks, applications and data
to stay productive as they work from anywhere. Theivanti.com

Ivanti automation platform connects the company’s

1 800 982 2130

industry-leading unified endpoint management, zerosales@ivanti.com

trust security and enterprise service management
solutions, providing a single pane of glass forenterprises to self-heal and self-secure devices, andself-service end users. More than 40,000 customers,
including 78 of the Fortune 100, have chosen Ivanti todiscover, manage, secure and service their IT assets
from cloud to edge, and deliver excellent end user
experiences for employees, wherever and however
they work. For more information, visit ivanti.com

Copyright © 2022, Ivanti. All rights reserved. IVI-2479 10/22 NH