AirWatch Demo - Android for Work: Work Profilehelp.vmwdemo.com/internal/DemoTopic-AndroidforWork.pdfAirWatch Demo - Android for Work: Work Profile | v.2015.08 | August 2015 Copyright

AirWatch Demo - Android for Work: Work Profile | v.2015.08 | August 2015

Copyright © 2014 AirWatch, LLC. All rights reserved. Proprietary & Confidential.

AirWatch Demo - Android for Work: Work

Profile 2015-07-07



Page 1

Let’s Get Started (5 Minutes)

Introductions

When beginning a demo, introduce yourself and any supporting AirWatch contacts on the call. Additionally, ask for

introductions of the prospect audience.

Capture names and roles within the organization

Load information into Salesforce after the demo

Use this information to map the account

Background

After making introductions, ask the prospect to review their project and mobility initiatives. The goal is to validate their

requirements for a solution, open dialog with the prospect, and confirm the prepared demo agenda aligns with the

prospect’s needs.

Understand the project background and any mobility initiatives

Discover the landscape for any partners or competitors

Review project timelines and goals for deployment

Understand current device population

o Device types, counts, ownership

o Email configuration

o Applications deploying

o Content requirements

o Containerization approach

Review the Agenda for Call (1 Minute)

Presentation (5 Minutes)

Product Demo (15 Minutes)

Questions (10 Minutes)



Page 2

Quick Presentation

Sales Kit

Download a copy of the relevant presentation from myAirWatch Sales Kit in myAirWatch

Rearrange or delete slides to meet specific needs of your demo

Add slides from other approved Sales Kit presentations if needed

Explore AirWatch

Demo Preparation

The Android for Work (AfW) demo currently shows enrollment, unlike other demo flows. We currently show AfW

enrollment because AfW enrollment is a forerunning question on prospects’ and customers’ minds.

The very first time you run through an AfW enrollment your Google Account will be created in Google. This one-time

account creation process adds steps and may appear to be complex to some audiences. Therefore, in order to eliminate

the account creation steps from a demo be absolutely certain you have run successfully through the enrollment,

creating your @airwdemo.com Google account prior to a customer-facing demo.

Obtain an AfW-supported device.

o See the AirWatch Integration with Android for Work, Before You Begin section for a complete list of

supported devices.

o Device must be encrypted.

o If exists, delete the device record from demo.awmdm.com.

Download the AirWatch Agent from Google Play.

Enroll using your @airwdemo.com email address:

Email: {UserName}@airwdemo.com

Environment: demo.awmdm.com

GroupID: EXEC (default - @airwdemo.com puts you in EXEC)

BOD & CORP also support AfW, using server details.

BOD will give you full SSO.

Please review the Demo Device Mirroring Guide for help on how to display your device during a demo.

https://resources.air-watch.com/view/l5g2zlfgv3tnj3h54vw6/en

http://help.vmwdemo.com/docs/DemoDeviceMirroringGuide.pdf



Page 3

Demo Outline

AfW Device DEVICE Key Discussion Points:

Initial enrollment process is the same: download AW agent and then enroll.

When a supported device enrolls into an AfW configured OG, AW 100% handles the enrollment method, whether AfW or standard enrollment.

AfW configuration in AirWatch is a simple, single-screen setup.

Work Profile Security DEVICE

Key Discussion Points:

AirWatch detects the device type and automatically creates the Work Profile on the AfW-capable device.

Users don’t have to do a thing except follow intuitive prompts by Google and AirWatch.

AirWatch will automatically maintain the device’s managed state in the Work Profile, preventing users from manipulating the Work Profile.



Page 4

Work Profile Configuration DEVICE Key Discussion Points:

In AfW, AirWatch silently provisions and configures the automatically deployed apps. No user interaction is required! Skip the “set up your email” message.

The Work profile is a secure area on the device providing native DLP. Coupling this with AW app security DLP provides 2x fortification of an organization’s critical data.

Typical enrollment options can either be enabled or not. For example, a device passcode can be enforced or the AirWatch apps within the Work Profile can have a passcode configured by AirWatch...or both.

Work Profile View DEVICE Key Discussion Points:

The Work Profile is made up of the collection of apps badged with the red/white briefcase icon. Apps without the badge are NOT in the Work Profile, but on the consumer side.

Silent installation of the automatically deployed apps: Inbox, Browser, and Content

Apps setup for “auto” deployment are pushed silently by AirWatch into the Work Profile.

SDK-enabled apps (Inbox, Browser, & Content) have SSO and integrated authentication enabled.



Page 5

AfW App Catalog DEVICE Filter your view by “Android for Work” category Key Discussion Points:

Fully customizable App Catalog for easy distribution and management of enterprise apps.

App Catalog for Self Service has same UI and end user experience across all platforms

The Work Profile’s Google Play can list the same apps seen in the AirWatch App Catalog. Only apps approved by the AfW Admin will be available to install.

Install on-demand applications approved by the AfW Admin.

View app descriptions, screen shots, and ratings.

AirWatch Inbox in AfW DEVICE Key Discussion Points:

AirWatch automatically installs and configures the AirWatch Inbox app. Inbox includes email, contacts, and calendar, which are configured in the Work Profile, separate from the consumer side.

AirWatch silently configures a certificate in the Inbox making email authentication seamless to the user.

Inbox has its own configurable DLP, preventing screen captures, for multi-layered security.

Maximize data loss prevention (DLP) by requiring email attachments to open in Secure Content Locker, also within the Work Profile.



Page 6

AfW DLP DEVICE Open an email and copy text from its body. Demonstrate that there is text on the clipboard by pasting in another email. Switch to the consumer side of the device. On the consumer side, open an app that accepts paste, like Contacts or Notes. Attempt to paste—there will be nothing to paste on the clipboard. Key Discussion Points:

All activity from within the Work Profile is natively restricted from being transferred to the consumer side.

Coupling AfW DLP with AirWatch DLP is double-layered fold security.

AfW App Control DEVICE Attempt to uninstall either Inbox, Browser, or Content Locker from the Work Profile by long-pressing the app and dragging to “uninstall” at top of screen. The uninstall will fail. Key Discussion Points:

Application Control prevents users from even attempting to make changes to the apps in Work profile.

You can enable the Application Control profile to either require or blacklist specific applications. In the demo we are requiring apps by preventing their uninstall.



Page 7

AirWatch Browser DEVICE Key Discussion Points:

Access corporate intranet sites without exposing the device to VPN using app tunneling

Integrated Authentication - User can browse to SharePoint without having to enter credentials while in AirWatch Container

Cannot browse corporate resources outside of AirWatch Browser copy/paste SharePoint link into Work Profile’s Chrome app and note that device does not have access.

AirWatch Content Locker DEVICE Key Discussion Points:

Container-in-a-container: The Content Locker inside the Work Profile establishes even more multi-layered security.

Access corporate content in a containerized solution

Sync external repositories – SharePoint, Office 365, file shares, Google Drive, One Drive, etc.

Full Data Loss Prevention (such as restricting copy/paste and dynamic watermarking) and 2 layers of AES 256 bit encryption



Page 8

AfW Configuration Settings CONSOLE – System Settings Show AfW config at World Wide Enterprises: System Settings > Devices & Users > Android > Android for Work Key Discussion Points:

No special organizational group architecture is required! Android for Work can be configured at any OG level.

Single-screen setup.

Optional Directory Services integration into Google is managed.

Your org’s optional SAML config is managed.

AfW Profiles CONSOLE Key Discussion Points:

AirWatch provides the AfW admin simple profile setup and workflow.

Within the Work Profile, AirWatch can configure profiles for device passcode, Chrome settings, numerous Work Profile restrictions, Exchange ActiveSync, user certificates, application control, proxy settings, Wi-Fi, VPN, and custom XML profiles.

AirWatch Smart Group assignment makes profile assignment as open or granular as required.



Page 9

AfW App Management CONSOLE ROLE RESTIRCTION PREVENTS SHOWING. SPEAK TO IT. Key Discussion Points:

AirWatch automatically imports Work profile apps from Google Play. At the AfW-managed level, setting up Work-approved apps is a simple Import From Play action.

After the AfW Admin pre-approves the AfW apps in Google Play, all approved apps will automatically appear in an AirWatch app management wizard to be selectively chosen and subsequently imported into AirWatch.

AfW App Management CONSOLE – Device record Key Discussion Points:

The AirWatch device record provides quick and comprehensive view of all important device info an admin would need.

Device statuses on compliance, profiles, apps, content, location, user, and much more are available.

AirWatch automatically identifies and classifies the Android for Work device.

Android for Work devices can enroll into existing OGs alongside all other mobile devices.



Page 10

Demo Next Steps

Ask the audience for questions

o For example, is there anything in particular you would like to see more of?

Encourage signing up for a free trial

OPTIONAL – SHOW IF REQUESTED Google Chrome DEVICE Key Discussion Points:

AirWatch can configure numerous settings in AfW’s native browser, Google Chrome.

Chrome’s cookie handling, pop-ups, java script, images, password manger, history, search parameters, and much more can be configured by AirWatch.

On the demo device, Facebook.com and pinterest.com are blocked by the admin. Also, Incognito mode has been disabled

OPTIONAL – SHOW IF REQUESTED Google PIM (Divide) DEVICE Manually push the Divide app and profile “WWE - AfW - Google PIM Exchange” Key Discussion Points:

AirWatch configures Google Productivity suite (a.k.a. Divide), native AfW mail, calendar, & contacts.

An AirWatch-provisioned user certificate makes the user’s authentication seamless and silent.

The AfW copy and paste restriction makes it impossible for the user to copy from the Work profile to the consumer side.



Page 11

Discuss and confirm next steps and deliverables

o Make sure there are actionable deliverables

o Set timeline then meet and exceed timeline

Send a follow up email after the demo

o Say Thank You for Your Time

o Confirm any follow up steps and timelines

Demo Assistance

To report an issue with a demo environment, ask a question or give suggestions please contact the demo team at

[email protected].

mailto:[email protected]

Documents

AirWatch Demo - Android for Work: Work Profilehelp.vmwdemo.com/internal/DemoTopic-AndroidforWork.pdfAirWatch Demo - Android for Work: Work Profile | v.2015.08 | August 2015 Copyright