Junos Pulse Mobile Security Gateway 4.2 2013-3-29 R1 Copyright 2013, Juniper Networks, Inc.
Juniper Networks, Inc. 1194 North Mathilda Avenue Sunnyvale, California 94089 USA 408-745-2000 www.juniper.net Integrated Systems Inc. Epilogue Technology Envoy SNMP Engine Copyright 1986-1997, Epilogue Technology Corporation. All rights reserved. Mark Moraes Copyright 1988, 1989, 1993, University of Toronto. FreeBSD 4.4BSD 4.4BSD-Lite Copyright 1979, 1980, 1983, 1986, 1988, 1989, 1991, 1992, 1993, 1994. The Regents of the University of California. All rights reserved. GateD software copyright 1995, the Regents of the University. All rights reserved. Gate Daemon 3.0 Gated Kirton EGP UC routeddcn HELLO Gated Portions of the GateD software copyright 1988, Regents of the University of California. All rights reserved. Portions of the GateD software copyright 1991, D.L.S. Associates. Maker Communications, Inc. Copyright 1996, 1997, Maker Communications, Inc. Juniper Networks Junos Steel-Belted Radius NetScreen ScreenOS Juniper Networks, Inc. Juniper Networks Junos JunosE Juniper Networks, Inc. Juniper Networks Juniper Networks Juniper Networks Juniper Networks 1 U.S. Patent Nos. 5,473,599 5,905,725 5,909,440 6,192,051 6,333,650 6,359,479 6,406,312 6,429,706 6,459,579 6,493,347 6,538,518 6,538,899 6,552,918 6,567,902 6,578,186 6,590,785 Junos Pulse Mobiles Security Gateway 4.2 Copyright 2012, Juniper Networks, Inc. All rights reserved. 2000 Juniper Networks 2000 Junos OS 2038 NTP 2036 Juniper Networks Juniper Networks http://www.juniper.net/support/eula.html EULA ii Copyright 2013, Juniper Networks, Inc.
... v... v... v... vi... vi JTAC... vi 1 1 Pulse Mobile Security... 1... 2... 2... 3 Pulse Mobile Security 4.2...4 Pulse Mobile Security Gateway...4 Pulse Mobile Security Gateway...5 2 Pulse Mobile Security Gateway 7... 7... 7...8...9...12...12... 14... 14... 15 ios... 15 ios... 16... 16... 16...17 Pulse Mobile Security Gateway... 18 GCM SMS... 18... 20 Pulse Mobile Security Gateway...21 Control Center...22 Control Center...22...23 3 25... 25 MDM... 26 v iii
JWOS Command Reference Guide MDM... 26 MDM... 34 MDM... 35 MDM... 36... 36... 36... 43... 43...44...44...44... 45... 45... 45... 45...46...46...46...46...47...47...47 4 49...49...49...50...50... 51 5 53... 53... 53... 54...57...57...60...60 6 63... 63... 65...66 GPS...66... 67 A 69 Pulse Mobile Security...69 73 iv
: Junos Pulse Mobile Security Suite Pulse Mobile Security Gateway Mobile Security Gateway Pulse Junos Pulse Mobile Security Gateway Junos Pulse Mobile Security Juniper Networks Juniper Networks Web http://www.juniper.net/techpubs/ Juniper Networks Books Juniper Networks http://www.juniper.net/books techpubs-comments@juniper.net https://www.juniper.net/cgi-bin/docbugreport/ E URL Copyright 2013, Juniper Networks, Inc. v
Juniper Networks JTAC J-Care JNASC JTAC JTAC JTAC http://www.juniper.net/customers/support/downloads/710059.pdf JTAC http://www.juniper.net/support/warranty/ JTAC JTAC 365 24 Juniper Networks Customer Support Center CSC CSC http://www.juniper.net/customers/support/ http://www2.juniper.net/kb/ http://www.juniper.net/techpubs/ http://kb.juniper.net/ http://www.juniper.net/customers/csc/software/ JTAC http://www.juniper.net/alerts/ Juniper Networks http://www.juniper.net/company/communities/ CSC Case Manager http://www.juniper.net/cm/ Serial Number Entitlement SNE https://tools.juniper.net/serialnumberentitlementsearch/ JTAC Web http://www.juniper.net/cm/ CSC Case Manager 1-888-314-JTAC 1-888-314-5822 http://www.juniper.net/support/requesting-support/ vi Copyright 2013, Juniper Networks, Inc.
1 : 1 Pulse Mobile Security Gateway 1 Pulse Mobile Security 4 Pulse Mobile Security Gateway 5 Pulse Mobile Security Gateway Pulse Mobile Security Pulse Mobile Security Gateway Junos Pulse Mobile Security Suite Pulse Mobile Security Suite ID Pulse Apple ios RIM BlackBerry Google Android Nokia Symbian Windows Mobile http://www.juniper.net/support/products/pulse/mobile/ Junos Pulse Mobile Supported Platforms Guide Pulse 3 VPN BlackBerry Juniper Networks SA SSL VPN Pulse Mobile Security Gateway Pulse Mobile Security Suite ios Android Copyright 2013, Juniper Networks, Inc. Pulse Mobile Security 1
Android Android IP SMS ios GPS SIM SMS MMS : Windows Mobile Symbian Junos Pulse Supported Mobile Platforms Guide Junos Pulse SSL VPN Pulse Pulse Mobile Security Gateway 1 2 Pulse Mobile Security Copyright 2013, Juniper Networks, Inc.
1 : 1 MSISDN Mobile Subscriber Integrated Services Digital Network IMEI International Mobile Equipment Identity 1 MDM ios Android VPN Wi-Fi Monitor and Control SIM Windows Mobile Symbian > > SMS 12 Pulse : Copyright 2013, Juniper Networks, Inc. Pulse Mobile Security 3
Pulse Mobile Security 4.2 4.2 SMS Clickatell TextingForward SMS ios TextingForward 18 GCM SMS Monitor and Control SIM 36 Android /data/app Android UI Android FIPS Android ios Secure Access 7.3 Juniper Networks MAG VPN FIPS Exchange ActiveSync ios MDM Exchange ActiveSync MDM Exchange ActiveSync API API 100 Android API JBOSS 7 MySQL 5.5 [ ] > [ ] 4.2 Junos Pulse Pulse 4.2 Pulse 4.2 Pulse Mobile Security Gateway Pulse Mobile Security Gateway URL Juniper Networks URL https://mss.junospulse.juniper.net 4 Pulse Mobile Security Gateway Copyright 2013, Juniper Networks, Inc.
1 : root@smobilesystems.com password URL Juniper Networks URL https://mss.junospulse.juniper.net/smobile/dashboard/login.htm Windows Mobile Symbian IMEI imei @a.a : Pulse Mobile Security Gateway Google Chrome 6.0 Microsoft Internet Explorer 7.0 8.0 Mozilla Firefox 3.0 3.5 3.6 JavaScript Cookie Pulse Mobile Security Gateway Pulse Mobile Security Gateway 5 1 1: Pulse Mobile Security Gateway Copyright 2013, Juniper Networks, Inc. Pulse Mobile Security Gateway 5
MSISDDID ESN IMEI IMSI UUID [ ] 63 Android ios MDM Windows Mobile Symbian Android 25 MDM 1 Android GCM Control Center 6 Pulse Mobile Security Gateway Copyright 2013, Juniper Networks, Inc.
2 : Pulse Mobile Security Gateway 2 Pulse Mobile Security Gateway Pulse Mobile Security Gateway Juniper Networks Junos Pulse 7 12 15 16 * 18 GCM SMS * 20 * 1 7 8 9 1 1 1. 2. [ ] [ ] 3. 4. [ ] Copyright 2013, Juniper Networks, Inc. 7
1. 2. [ ] [ ] 3. 2031 Android BlackBerry ios 8 Copyright 2013, Juniper Networks, Inc.
2 : Pulse Mobile Security Gateway 9 Monitor and Control Android ios Monitor and Control MDM GPS 34 ios 4. [ ] [ ] 5. [ ] [ ] [ ] [ ] 9 54 : Symbian Windows Mobile 1. [ ] 8 SOAP API [UUID ] 2. [ ] [ ] [MDM ] [ ] Copyright 2013, Juniper Networks, Inc. 9
URL Pulse URL URL SMS MDM ios Android ios Android Apple IPCU Android AutomaticDefault ios AutomaticAndroidDefault [MDM ] 54 ios [ ] APNS Apple Push Notification Service APNS [ ] [ ] 3.0 APNS Secure Access Host Checker ios CA Secure Access CA [CA ] 1 [ ] Pulse 10 Copyright 2013, Juniper Networks, Inc.
2 : Pulse Mobile Security Gateway MDM APNS (CSR) ios APNS ios iphone 3G ipad 3G GPS APNS GPS Pulse Apple ID https://appleid.apple.com Apple ID Control Center 22 Control Center APNS 1. CSR [ ] / 2 2. [ ] CSR Control Center MSG Control Center 3. [ ] apnscsr.plist 4. [Apple CSR ] Apple a. [ ] apnscsr.plist [ ] b. [ ] APNS MDM_< >_Certificate.pem 5. [ ] [ ] APNS [ ] PEM [ ] AutomaticEnterpriseDefaultDeviceProfile [ ] 54 Copyright 2013, Juniper Networks, Inc. 11
Pulse Mobile Security Gateway 1 : root@smobilesystems.com Control Center 1. : 2. [ ] [ ] 3. [ ] [ ] [ ] [ ] [ ] [ ] [ ] [ ] [ ] [ ] [ ] 5 [ ] 12 Copyright 2013, Juniper Networks, Inc.
2 : Pulse Mobile Security Gateway MDM Android [ ] [ ] [ ] [ ] [ ] [MDM ] [ ] [ ] [ ] [ ] [ ] [ ] [ ] [ ] [ ] [ ] 4. [ ] [ ] UUID UUID [ ] [ ] [ ] [ ] [ ] [ ] [ ] [ ] [ ] [ ] MDM [ ] UUID [ ] [UUID ] [UUID ] [ ] [ ] [ ] [ ] Copyright 2013, Juniper Networks, Inc. 13
[ ] Monitor and Control GPS Android 5. [ ] 1. 1 2. [ ] 3. [ ] 8 4. [ ] 1. 2. [ ] 3. [ ] 4. [ ] [ ] 14 Copyright 2013, Juniper Networks, Inc.
2 : Pulse Mobile Security Gateway 5. [ ] 6. [ ] ios Pulse Mobile Security Gateway Pulse DIS 15 ios 16 ios 16 ios itunes App Store Pulse URL URL http://itunes.apple.com/us/app/junoe-pulse/id381348546?mt=8 Pulse Mobile Security Gateway junospulse URL URL junospulse:///?method=mss&action=autoregister&url==https:/mss.junospulse.juni per.net/smobile/ident/registerdevice.htm ios UDID 53 URL junospulse URL : ios Pulse [ ] > [ ] Juniper MDM.C Copyright 2013, Juniper Networks, Inc. 15
ios ios SMS Pulse URL URL SMS 53 SMS ios Pulse Juniper Networks Windows Mobile Symbian SMS ios SMS Android BlackBerry ios DIS 16 Android ios BlackBerry Pulse Mobile Security Gateway Juniper Networks Pulse 1. Junos Pulse SMS junospulse URL Web Pulse URL : BlackBerry Pulse Pulse 2. Pulse 16 Copyright 2013, Juniper Networks, Inc.
2 : Pulse Mobile Security Gateway 3. Security Assertion Markup Language SAML Pulse Mobile Security Gateway URL SAML 4. Pulse SAML 5. SAML Pulse Mobile Security Gateway SAML 17 18 Pulse Mobile Security Gateway Pulse Mobile Security Gateway SAML 1. Distinguished Encoding Rules DER 2. Pulse Mobile Security Gateway 3. [ ] 4. [ ] [ ] 5. SAML SAML [ ] 6. [ ] Copyright 2013, Juniper Networks, Inc. 17
Pulse Mobile Security Gateway OpenSSL Pulse Mobile Security Gateway PKCS12 DER SAML : Pulse Mobile Security Gateway 1. PKCS12 2. Pulse Mobile Security Gateway 3. [ ] [ ] [ ] 4. [ ] PKCS12 5. 6. [ ] 7. DER GCM SMS Pulse Mobile Security Gateway [ ] SMS ios Clickatell TextingForward TextingForward a. b. c. Google Cloud Messaging GCM C2DM Android 2.2 SMS GCM 5 GCM C2DM C2DM C2DM SMS SMS GCM SMS GCM 18 GCM SMS Copyright 2013, Juniper Networks, Inc.
2 : Pulse Mobile Security Gateway 1. [ ] [ ] 2. [ ] Android C2DM GCM ID GCM API [ ] [ ] C2DM C2DM Google Web Google API ID ID API http://developer.android.com/guide/google/gcm/gs.html Google API IP URL URL URL URL [ ] URL URL URL URL API URL SMS [Clickatell] [TextingForward] SMS API ios SMS GCM Android SMS SMS API API SMS API URL API keyword=value URL keyword=value URL Copyright 2013, Juniper Networks, Inc. GCM SMS 19
API URL TextingForward TextingForward carriercode=sprintus, carriercode=verizonus URL http://textingforward.com/tadpole_outgoing_sms_api_07202010.pdf API URL 1 [Clickatell] [TextingForward] [ ] [ ] [ ] Juniper Networks MTC 1 Pulse Mobile Security Gateway ios Juniper Networks Control Center Control Center Control Center 1. root@smobilesystems.com 2. Juniper Networks 20 Copyright 2013, Juniper Networks, Inc.
2 : Pulse Mobile Security Gateway 3. Control Center 4. Control Center Control Center 21 Pulse Mobile Security Gateway 22 Control Center 22 Control Center 23 Pulse Mobile Security Gateway Control Center Juniper Networks Control Center 1. root@smobilesystems.com 2. [ ] [MSG ] 3. [ ] [ ] 1 [ ] PKCS12 PEM.pks.pkcs12.pfx.pem [ ] DER PEM.der.pem 4. a. [ ] [ ] / 2 1024 2048 b. [ ] c. CA d. [ ] [ ] 5. [ ] [ ] [ ] [ ] Copyright 2013, Juniper Networks, Inc. 21
6. [ ] CA Juniper Networks Control Center Control Center Control Center 1. root@smobilesystems.com 2. [ ] [ CA] 3. [ ] Control Center [ ] CA Control Center Control Center Control Center Control Center Control Center Control Center 1. root@smobilesystems.com 2. [ ] [MSG Control Center ] Control Center Control Center Control Center Control Center 3. [ ] 4. Control Center MSG Control Center URL MSG Control Center URL https://mcc.junospulse.juniper.net Control Center CA Control Center 21 Pulse Mobile Security Gateway Control Center URL 23 5. [ ] 22 Copyright 2013, Juniper Networks, Inc.
2 : Pulse Mobile Security Gateway Control Center Control Center URL URL 1. root@smobilesystems.com 2. [ ] [ ] [ ] MSG Control Center Control Center MSG MSG [ ] 3. [ ] 4. URL Control Center URL [ ] Control Center 5. [ ] [ ] Copyright 2013, Juniper Networks, Inc. 23
24 Copyright 2013, Juniper Networks, Inc.
3 : 3 25 26 MDM 36 44 46 Pulse Mobile Security Gateway Android Android Android : Android 63 1. [ ] [ ] 2. [ ] [ ] Android com.rovio.angrybirds 100 50 Angry Birds 3. [ ] Copyright 2013, Juniper Networks, Inc. 25
4. [ ] [ ] MDM MDM 26 MDM 34 MDM 35 MDM 36 MDM MDM MDM ios Android VPN Wi-Fi ios AutomaticDefault Android AutomaticAndroidDefault : Apple IPCU ios 34 MDM MDM 54 Update Profile MDM 1. [ ] [MDM ] 2. [ ] [ ] copy-of-< > copy2-of- copy3-of- : 3. [ ] 27 27 Exchange ActiveSync 27 30 VPN 31 SCEP ios 26 MDM Copyright 2013, Juniper Networks, Inc.
3 : 32 Wi-Fi 34 ios MDM MDM 50 300 Exchange ActiveSync Exchange ios Android Samsung Microsoft Exchange Exchange Exchange ActiveSync ios 5 ios 5 SSL Microsoft Exchange Pulse Mobile Security Gateway user@example.com juniper.com Exchange user@juniper.com Exchange Microsoft Exchange Microsoft Exchange Safari : ios 5 Microsoft Exchange SSL MDM Copyright 2013, Juniper Networks, Inc. MDM 27
[ ] Android ios Android PasswordNotSufficient 1 5 [ ] ios [ ] [ ] 4 16 [ ] 1 1 16[ ] $ & 1 4 [ ] 1 50 1 730 [ ] Android 4.0 Bluetooth Samsung Android [ ] Bluetooth WiFi Samsung 28 MDM Copyright 2013, Juniper Networks, Inc.
3 : ios Siri Siri YouTube itunes Music Store Safari Podcast [ ] itunes [ ] FaceTime [FaceTime ] itunes Siri Siri Siri YouTube YouTube [YouTube] itunes itunes [itunes] Safari Web Safari [Safari] Web Web Web JavaScript JavaScript Cookie Cookie Web itunes Store Copyright 2013, Juniper Networks, Inc. MDM 29
ios 5 ios 5 ios 5 Apple TLS icloud iwork icloud icloud : ios Apple Safari itunes itunes iphone VPN MDM VPN 1 VPN VPN VPN Juniper Networks SA VPN 1. [ VPN] VPN [ ] 1 [ ] [ ] Copy-of- 2. VPN [ ] [ VPN] VPN 50 VPN VPN Juniper Networks SA Juniper SSL VPN 50 IP SA 50 ios SA 50 ios 30 MDM Copyright 2013, Juniper Networks, Inc.
3 : VPN ios VPN VPN 50 [ ] 31 SCEP ios [ ] VPN 100 example.com example.com www.test-example.com VPN DNS [ ] [ ] VPN [+] [-] SCEP ios MDM SCEP CA 1 ios SCEP SCEP 1. [ SCEP ] SCEP [ ] 1 [ ] [ ] CA Copy-of- 2. [ ] [ SCEP ] URL SCEP URL 100 50 SCEP UDID UDID X.500 ID 100 /C=US/O=Juniper Networks/CN=foo/1.2.5.3=bar Copyright 2013, Juniper Networks, Inc. MDM 31
NT CA RFC-822 DNS UDID UDID RFC 822 100 100 CA NT 100 SCEP 50 1024 2048 CA HTTPS HTTP CA 100 CA SHA1 MD5 [ ] SHA1 PEM.pem.crt.cer.key Wi-Fi MDM 1 Wi-Fi Wi-Fi 1. [ Wi-Fi] Wi-Fi [ ] 1 [ ] [ ] ID Copy-of- 2. [ ] ID [ Wi-Fi] 32 MDM Copyright 2013, Juniper Networks, Inc.
3 : ios ID 32 WEP Wired Equivalent Privacy WPA/WPA2 Wi-Fi Protected Access ( ) WEP WPA WPA2 WEP Enterprise WEP IEEE 802.1X 3 WPA/WPA2 Enterprise WPA WPA2 3 ( ) WEP WPA WPA2 3 [ ] [ ] ios Android EAP EAP-Fast ios RADIUS Extensible Authentication Protocol EAP TTLS Android PEAP ios PAP CHAP MSCHAP MSCHAPv2 Android PAP MSCHAP MSCHAPv2 Protected Access Credential PAC ios PAC PAC PAC PAC ios [PAC ] PAC Copyright 2013, Juniper Networks, Inc. MDM 33
ios UDID UDID 50 [ ] 80 [ ] 31 SCEP ios TTLS PEAP EAP-FAST anonymous 50 Android 50 80 ios iphone 3G ipad 3G ios 4.2 GPS GPS [GPS ] [ ] GPS 66 GPS : GPS GPS 48 MDM Apple iphone IPCU Mobile Security ios MDM IPCU ios IPCU URL http://www.apple.com/support/iphone/enterprise/ IPCU IPCU IPCU msgusername > [Exchange ActiveSync] [ ] 34 MDM Copyright 2013, Juniper Networks, Inc.
3 : > [SCEP] [ ] CN= > [SCEP] [ ] msguserudid UUID > [SCEP] [ ] CN= > [SCEP] [ ] Android [MDM ] [ ] [ ] XML IPCU IPCU MDM 1. [ ] [MDM ] 2. IPCU a. [ios ] b. [ ] IPCU IPCU [ ] ios_.mobilconfig 3. IPCU a. IPCU [ ] [ ] [ ] [ ] b. [MDM ] [ios ] [ ] IPCU [ios ] [ ] IPCU : MDM MDM Android ios AutomaticDefault ios AutomaticAndroidDefault Android Copyright 2013, Juniper Networks, Inc. MDM 35
[ ] [ ] [MDM ] ios Android [MDM ] MDM 1. [ ] [MDM ] 2. ios Android MDM 3. [ MDM ] [ ios ] [ Android ] [ ] [ios] [Android] MDM MDM 1 Android ios Update Profile MDM AutomaticDefault AutomaticAndroidDefault 1 MDM 1. [ ] [MDM ] 2. [ ] 36 43 43 Monitor and Control SIM AutomaticEnterpriseDefaultDeviceProfile 54 Update Profile 36 Copyright 2013, Juniper Networks, Inc.
3 : 1. [ ] [ ] 2. [ ] [ ] copy-of-< > : 3. [ ] 37 38 UI 40 41 Monitor and Control 41 42 42 SIM MDM 50 300 ios [ ] ios 9 Copyright 2013, Juniper Networks, Inc. 37
UI UI Android BlackBerry UI ios UI Android BlackBerry Junos Pulse UI Junos Pulse UI [ ] [ ] UI VPN Junos Pulse 38 Copyright 2013, Juniper Networks, Inc.
3 : UI Android BlackBerry [UI ] [ UI] [ UI] / 57 [ ] [ / ] URL API Windows Mobile Symbian [ ] [ ] [ ] [ ] [ / ] [ / ] [ ] [ ] [ / ] [ / ] [ ] [ ] [ / ] [ / ] Monitor and Control Monitor and Control [ / ] [ ] GPS [ ] [ ] [ ] [ ] Monitor and Control Copyright 2013, Juniper Networks, Inc. 39
[ / ] Monitor and Control 66 [ ] [ / ] [ / ] [ / ] [ / ] [ / ] 71 Handset Wipe / [ / ] [ / ] [ / ] ios GPS ios GPS [ / ] [ / ] URL ios Android ios ios SD ios Android.zip.gzip.jar 1 MB Android MD5.gpp.m4a.mov.mpg.mp3.mp4.wav.bmp.gif.jpg.png.tif/.tiff [ ] 1 72 [ ] 1 999Android 40 Copyright 2013, Juniper Networks, Inc.
3 : Monitor and Control Monitor and Control ios E SMS MMS Web GPS ios SMS MMS SMS [ ] : SMS HTTPS ios 100K [ ] : 3 Android ios ios SMS BlackBerry Symbian MMS [ ] ios BlackBerry ios ios Web Android ios ios GPS GPS [ ] ios iphone 3G ipad 3G MDM 34 ios GPS 66 GPS Windows Mobile Symbian Symbian Windows Mobile Copyright 2013, Juniper Networks, Inc. 41
44 1 Windows Mobile Symbian Symbian Windows Mobile SMS 5 6 SMS SMS SMS SMS IM SMS 46 1 SIM ios SIM SIM ios SIM : SIM 42 Copyright 2013, Juniper Networks, Inc.
3 : SIM SIM ios [SIM ] 71 Handset Wipe Android 2.2 Junos Pulse GPS Monitor and Control Android 2.1 GPS Monitor and Control SD AutomaticEnterpriseDefaultDeviceProfile [ ] [ ] [ ] 1. [ ] [ ] 2. [ ] [ ] [ ] Update Profile AutomaticEnterpriseDefaultDeviceProfile 1 1. [ ] [ ] 2. [ ] Copyright 2013, Juniper Networks, Inc. 43
Pulse Mobile Security Gateway Windows Mobile Symbian 1. [ ] [ ] 2. [ ] [ ] IP 50 IP 100 IP [ ] [ ] [ ] [ ] [ ] IP IPv4 10 : 10.100.10.1 * 0 255 : 10.*.10.* 0 65535 [ ] [ ] [ ] Update Profile 1. [ ] [ ] 2. 3. [ ] 44 Copyright 2013, Juniper Networks, Inc.
3 : 1 1. [ ] [ ] 2. [ ] 1. [ ] [ ] 2. [ ] 50 [ ] [ ] 3. [ ] Update Profile 1. [ ] [ ] 2. 3. [ ] [ ] 4. [ ] [ ] 1 1. [ ] [ ] 2. [ ] Copyright 2013, Juniper Networks, Inc. 45
Pulse Mobile Security Gateway SMS 1. [ ] [ ] 2. [ ] SMS 3. [ ] Update Profile 1. [ ] [ ] 2. 3. [ ] 1 1. [ ] [ ] 2. [ ] 46 Copyright 2013, Juniper Networks, Inc.
3 : 1. [ ] [ ] 2. [ ] 50 [ ] [ ] 3. [ ] Update Profile 1. [ ] [ ] 2. 3. [ ] [ ] [ ] 1 1. 2. [ ] [ ] 3. [ ] Copyright 2013, Juniper Networks, Inc. 47
48 Copyright 2013, Juniper Networks, Inc.
4 : 4 49 51 Pulse Mobile Security Gateway 1. 2. [ ] 3. [ ] 8 4. [ ] 12 Copyright 2013, Juniper Networks, Inc. 49
[ ] 1. [ ] 2. 3. [ ] [ ] [ ] gmail [ ] [ ] gmail [ ] : 4. [ ] 3 [ ] 8 5. [ ] 1. 2. [ ] 3. [ ] 50 Copyright 2013, Juniper Networks, Inc.
4 : [ ] [ ] > [ ] 1. [ ] [ ] 2. a. b. [ ] 36 c. [ ] 3. a. b. 1 [ ] 1. [ ] 2. a. b. [ ] [ ] 3. a. b. [] Copyright 2013, Juniper Networks, Inc. 51
52 Copyright 2013, Juniper Networks, Inc.
5 : 5 Pulse Mobile Security Gateway 53 53 54 57 57 60 60 Pulse Mobile Security Suite Pulse Mobile Security Gateway Junos Pulse Mobile Security Suite 1 SMS ios ios [ ] URL ios Copyright 2013, Juniper Networks, Inc. 53
Pulse ios Windows Mobile Symbian IMEI imei @a.a : ios URL SMS 1. [ ] 2. [ ] ios 1603555121 ios [ios] E - UDID - UDID 3. [ ] SMS Pulse MDM Pulse : 4.2 Monitor and Control 36 1. [ ] 2. 3. [ ] [ ] [ ID] ID DID ESN IMEI IMSI UUID *? 1614 [ ID] 1614 [ ] [ ] 54 Copyright 2013, Juniper Networks, Inc.
5 : 4. [ ] 57 [ ] [ ] : [ ] 5. [ ] [ ] Update Profile Junos Pulse MSISD [ /ID] [ ] Junos Pulse [ ] MDM ID ios MDM ios APNS ios APNS ios Pulse Monitor and Control SIM 36 Copyright 2013, Juniper Networks, Inc. 55
MDM UUID IMEI IMSI ESN DID ios Android Remove Profile MDM 26 MDM Apple IPCU Android : ios Pulse [ ] > [ ] Juniper MDM.C International Mobile Equipment Identity GSM WCDMA DID ID International Mobile Subscriber Identity GSM UMTS Electronic Serial Number ios UDID 2031 Android [ ] MDM Android ios ios ios 56 Copyright 2013, Juniper Networks, Inc.
5 : ios Android MDM BlackBerry Symbian Windows Mobile 1 Update Profile MDM 1 1. [ ] 2. [ ID] [ ] [ ] 3. [ ] [MDM ] [ ] MDM 1 Android ios : ios Android 1 MDM 4. [ ] [ ] 63 Update Profile Update Profile GPS APNS ios SMS ios Android GCM 63 Copyright 2013, Juniper Networks, Inc. 57
: Wi-Fi SMS ios ios 1. 2. 3. [ ] [ ] 58 1 ios ios ios 38 UI ios : ios Update Profile ios Install Profile Update Profile 1: Update Profile Install Profile Retrieve Application List Retrieve Installed Application List Handset Wipe Erase Device Monitor and Control [ ] 66 [ ] 71 3Handset Wipe Android BlackBerry ios Android 2.2 Junos Pulse Android Android 2.1 SD iphone 4 iphone 8 GB 1 58 Copyright 2013, Juniper Networks, Inc.
5 : Handset Lock Device Lock Handset UnLock Clear Passcode Android BlackBerry Android BlackBerry / Android BlackBerry Handset Unlock Android BlackBerry ios : ios Android BlackBerry / : Android ios Scan Handset Scan Card Update Virus Definitions Retrieve Logs Handset Backup Handset GPS Location Alarm On Alarm Off SD Monitor and Control Monitor and Control [ ] 66 [ ] GPS Copyright 2013, Juniper Networks, Inc. 59
GPS Theft On GPS Theft Off Restore Personal Data GPS GPS Theft On GPS GPS 2 3 GPS Theft Off GPS [GPS ] Application Message Retrieve Device Information Install Profile Remove ActiveSync Profile Remove Profile Remove Application Send Contact Log API Android ios MDM Exchange ActiveSync ios ActiveSync Android ios MDM [ ] 65 Monitor and Control [ ] 66 ios Pulse Handset Wipe 57 1 [ ] [ ] [ ] 60 Copyright 2013, Juniper Networks, Inc.
5 : 1. [ ] 2. a. b. [ ] 36 c. [ ] 3. a. b. 1 [ ] 1. [ ] 2. a. b. [ ] [ ] 3. a. b. [] Copyright 2013, Juniper Networks, Inc. 61
62 Copyright 2013, Juniper Networks, Inc.
6 : 6 63 65 66 66 GPS 67 Pulse Mobile Security Suite 1. [ ] 2. [ ] [ ] [ ] : 1000 Excel TSV 1000 10 ID IMEI IMSI MSISD [ ] [ ] [ ] IMEI IMSI DID MSISD ESN Copyright 2013, Juniper Networks, Inc. 63
Monitor and Control GPS Pulse Mobile Security Gateway ID SMS MMS 66 ID 65 GPS GPS Theft On GPS ID GPS [ ] 66 GPS Pulse Mobile Security Gateway ios SMS PROCESSED FAILEDFAILED SMS GCM SMS GCM ios i_created - i_pushed - Apple APNS i_pulled - i_notnow - i_executed - i_error - [Ack ] i_formaterror - i_emptyprofile - GPS Ack true false false Ack [ ] FAILED i_error [Ack ] false Handset Wipe Scan Handset 64 Copyright 2013, Juniper Networks, Inc.
6 : Android [ ] Android 1 ID 1 Android [ ] [ ] Android Remove Application : 1. [ ] 2. [ ] Send App Log [Monitor and Control ] [ ] [ ] 3. [ ] [ ] Copyright 2013, Juniper Networks, Inc. 65
4. 5. [ ] [ ] ios MMS SMS : 1. [ ] 2. [Monitor and Control ] 3. 4. [ ] GPS GPS Pulse Mobile Security Gateway GPS GPS GPS Theft On ios 1. [ ] 2. [GPS ] GPS GPS [ ] GPS Assisted GPS 3. [ ] : 0.0 66 Copyright 2013, Juniper Networks, Inc.
6 : IP 1. [ ] 2. a. [ ] b. [ ] c. [ ] 3. [ ] Copyright 2013, Juniper Networks, Inc. 67
68 Copyright 2013, Juniper Networks, Inc.
A: A Pulse Mobile Security 2 Pulse Mobile Security 3 Handset Wipe 2: Windows Android BlackBerry ios Symbian Mobile / / SD Samsung Web VPN SRX IPsec Exchange GPS / GPS / / SIM Copyright 2013, Juniper Networks, Inc. Pulse Mobile Security 69
Windows Android BlackBerry ios Symbian Mobile / MMS SMS Web Monitor and Control UI SCEP VPN VPN PKI 2FA Wi-Fi SIM 70 Pulse Mobile Security Copyright 2013, Juniper Networks, Inc.
A: 3: Handset Wipe Android 2.2 BlackBerry ios Symbian Windows Mobile ToDo SMS MMS SMS : Android 2.2 Android 2.1 SMS Copyright 2013, Juniper Networks, Inc. Pulse Mobile Security 71
72 Pulse Mobile Security Copyright 2013, Juniper Networks, Inc.
A ActiveSync Exchange MDM...........27 Android......................10 Android....................40 Android.........................65 APNS CSR..............................11 APNS....................11 Application Message.......................60 B Backup.................................59 C C2DM.....................................18 Clear Passcode...........................59 Control Center...............................20, 22 Cookie.........................................5 D Device Lock..............................59 E Erase Device.............................58 Exchange MDM....................27 G GCM......................................18 GPS Location............................59 GPS Theft...............................60 GPS................................34, 41 GPS.............................64, 66 I Install Profile..........................58, 60 ios....................................58 ios......................10 ios.........................10 IPCU..............................34 J JavaScript......................................5 JTAC............................. vi L Lock Wipe.......................58 M MDM....................................... 36................................... 26.............................. 57........................ 10, 35, 56 Monitor and Control..................... 41.................................... 64 R Remove ActiveSync Profile.................. 60 Remove Application....................... 60 Remove Profile........................ 56, 60 Restore................................ 60 Retrieve Application List.................... 58 Retrieve Device Information.................. 60 Retrieve Installed Application List.............. 58 Retrieve Logs............................ 59 S SCEP MDM...................... 31 SD................................. 40, 59................................... 58, 71 Send Contact Log......................... 60 SIM...................... 42 SMS............................ 18 U UI................................. 39 UI...................................... 38 Unlock................................. 59 Update Profile........................... 58 UUID UUID.......................... 9 UUID............................... 56 V VPN MDM....................... 30 W Wi-Fi MDM...................... 32 Copyright 2013, Juniper Networks, Inc. 73
............................. 40 SMS........................... 18....................................... 25....................................... 65....................................... 66..................... 28............................ 64, 65............................. 64..................... 42........................... 46 Update Virus Definitions.................. 59................................... 20.................................... 63................................ 6............................. 63........................................ 8........................................ 9 JTAC............................... vi............................... vi.......................... 5............................ 12............................. 25 GPS................................. 34, 41 ios...................... 10 ios............................... 37...................... 60.................................. 57............................. 64............................ 8................................ 39................................ 63.........................18.......................................16.....................................66.........................18.......................................15..........................42..............................20, 23.....................................20...............................40 Android...................40................................59.................................55 MDM...........................28 MDM........................32...........................64 URL....................10, 53............................... vi MDM.........................57........................................53.......................57........................................15........................................54.................66....................16................................60............................69..................................66..................................15................11, 43........................................43...................................36...............................55 MDM........................35.....................43..................................40..................................55....................................63 74 Copyright 2013, Juniper Networks, Inc.
MDM SCEP................................31 Wi-Fi.......................................34 MDM...................28...........5........................................50..................................7......................41............................44 MDM.......................................26..................................46.....................................36...............................44...........................63................34.........................34....................................67.................................41......................20, 23..............................20 Android.....................40.................................. 8................................. 46.............................. 44 Android...................... 65 GPS.............................. 64 Monitor and Control..................... 64............................. 64........................... 64........................... 63........................... 64.................................... 63........................ 64................................. 63........................ 63................................... 66.......................... 67....................... 18........................................ 2....................................... 12.................................... 14............... 71.................................66.........................40..................................40, 59...................................58, 71 MTC........................20............................56.......................14, 49................................51........................14.............................58 Copyright 2013, Juniper Networks, Inc. 75
76 Copyright 2013, Juniper Networks, Inc.