Cisco Systems MaaS360 manual Enterprise Integration, Dmz

Enterprise Integration

Fiberlink MaaS360 offers a solution that enables integration with existing enterprise infrastructures such as AD, Exchange, and a certificate authority. This is achieved using a component called Fiberlink MaaS360 Cloud Extender. The Fiberlink MaaS360 Cloud Extender is a small program that runs as a service on a Microsoft Windows machine in your network. The Cloud Extender creates an outbound connection over HTTPS to the Fiberlink MaaS360 portal that is used as a bi-directional communication facility and allows the Fiberlink MaaS360 portal to integrate with an enterprise Active Directory Server to perform user authentication and synchronization of users and groups using Active Directory. The Fiberlink MaaS360 Cloud Extender requires that it be configured with an account with sufficient rights to run as a service and to have read-only access Active Directory.

Fiberlink MaaS360 Cloud Extender can be installed on a Physical or Virtual Machine with following specifications:

•Windows Server 2008 R2 (64-bit)

•Dual Core, 4 GB RAM

•Access to Fiberlink MaaS360 Cloud (outbound connection, port 443)

•Read-only Administrative access to AD to real user and group information

Redundancy configurations are available but are out of scope for this document. For more information, see: https://www.cisco.com/go/Fiberlink MaaS360support.

Figure 10 Typical Cloud Deployment Model

Internet				DMZ		Internal Network
						Cisco ISE
						AD/LDAP
HTTPS
						Email
Admin Portal						Request				CSR
HTTPS						Response			Certificate
	FiberLink				Certificate		Enrollment
User Portal		Cloud			Authority			Server
OTA	SSL
Configuration		HTTPS
	2195
Management			Cloud
			Extender
	APNS	GCM
iOS and							294254
Android Agents

Integrating Fiberlink MaaS360 with Cisco Identity Services Engine 17