Syste Manager

[LSA4]

Hi Team, can system manager meet all the below requirements

1. A secure portal for BYOD users to enroll and provision their devices
2. Centralized security policy enforcement.
3. Remotely lock and wipe data and installed apps - Inventory devices, operating systems (OSs), patch levels, organization and third-party apps, and revision levels.
4. Distribution whitelists and blacklists.
5. Permission-based access controls for access to the organization’s networks and data.
6. Selective wipe and privacy policies for organization apps and data, i.e., sandboxing.
7. Distribution and management of digital certificates (to encrypt and digitally sign emails and sensitive documents).
8. Role-based access groups with fine-grained access control policies and enforcement.
9. Over-the-air (OTA) distribution of software (apps, patches, updates) and policy changes.
10. Postpone automatic updates from Internet service providers (ISPs), e.g., in cases where an automatic OS update may cause critical apps to fail
    Secure logs and audit trails of all sensitive BYOD activities
11. Capability to locate and map lost devices for recovery.
12. Backup and restore BYOD device data.
13. Remove or install profiles based on geographic location, to ensure compliance with relevant foreign legislation, e.g., data privacy and security

[Christian_Ney · Accepted solution]

Hi @LSA4! Let me try to answer at least a few of your questions. Guess the guys who are more into Systems Manager will chime in later.

1. Yes, that‘s what Sentry is being used for https://documentation.meraki.com/SM/Deployment_Guides/Systems_Manager_Sentry_Overview

2. Yes, e.g. by using Policies

https://documentation.meraki.com/SM/Profiles_and_Settings/Configuration_Profiles

3. Yes (depending on the type of device / enrollment)

https://documentation.meraki.com/SM/Monitoring_and_Reporting/Selective_Wipe_and_Device_Quarantine_in_Systems_Manager

4. I don‘t quite understand

5. See Sentry

6. See 3.

7. You can push certificates https://documentation.meraki.com/SM/Profiles_and_Settings/Certificates_Payload_(Pushing_Certificates)

8. RBAC from a management perspective?

9. Yes, see 2. and https://documentation.meraki.com/SM/Apps_and_Software

10. I don‘t have an answer for that question

11. Yes https://documentation.meraki.com/SM/Tags_and_Policies/Geofencing_with_Managed_Devices

12. I don‘t have an answer for that question

13. Yes, via Geofencing and Policy (see 11. as a start)

Hope that helps. You‘ll find additional (high level) information in the data sheet: https://meraki.cisco.com/lib/pdf/meraki_datasheet_sm.pdf