MobileIron, specialised in in security and management for apps, content, and devices, announced MobileIron Tunnel, an end-to-end solution for per-app VPN on iOS.
With this app, users will have the ability to secure data-in-motion to almost any App Store app that is managed by the enterprise.
Tunnel will allow organizations to authorize specific business apps, including both internally built apps and App Store apps, to access corporate resources behind the firewall. Unapproved and personal apps will be blocked from using Tunnel, which enhances security and protects user privacy.
The app will be based on device and user identity, and also on the overall security posture of the device. If the device is not compliant, Tunnel will block even authorized apps from accessing the enterprise. Devices fall in and out of compliance regularly, especially in BYOD programs, making such dynamc access control essential.
Tunnel will also offer support of iOS 7 single sign on (SSO). MobileIron's ability to proxy Kerberos will allow iOS 7 SSO to be used with devices that are not on the corporate network without needing to expose the Kerberos Key Distribution Center (KDC).
Tunnel can ill enable Apple's Safari browser to securely access intranet sites behind the firewall with transparent authentication so that users do not have to re-enter their usernames and passwords as they go from site to site.
Basically, Tunnel combines the secure transport of traditional VPN with certificate-based identity and posture-based policy, all managed through a single console.