Cisco Systems manual Mobile Client Application-Fiberlink MaaS360 Agent, Mdm Apns/Gcn

Figure 17 Enrollment Network Flows

WebEnroll

MDM

Profile

APNS

Registration

Device

Check-in

Security

Scan

Profile

Install

Device	MDM	APNS/GCN
		Authenticate
		User
		Mobileconfig
		(mdm, cert)
	MDM Check-in
	Request
		Check-in
		Notification
		Policy
		Assessment
		293804

SCEP

Fiberlink MaaS360 can provision certificates onto the device via SCEP-PROXY. This allows profiles to contain a payload that provisions a service that requires authentication via a certificate and another payload contains the associated certificate. One such example is VPN payload for either AnyConnect or Cisco IPsec. This is discussed in more detail in Application Distribution.

Mobile Client Application—Fiberlink MaaS360 Agent

As discussed in the BYOD CVD, before the Fiberlink MaaS360 agent is installed, Software Provisioning Wizards (SPW) must be downloaded from Cisco site. For Apple iOS devices, access to the application store is not required. However, for the Android devices, the Software Provisioning Wizard (SPW) package needs to be downloaded from Google Play Store.

The following features require the Fiberlink MaaS360 agent be installed on the device:

•Jailbreak Detection

•Location Based Services

•Application Inventory (for blacklist, mandatory apps)

•Document Distribution

•Data Usage Tracking

•WiFi SSID Connection Tracking

•Admin to user messaging via the portal (or ISE)

Integrating Fiberlink MaaS360 with Cisco Identity Services Engine 25