A common question we get in the media is whether or not an employer can look at email on an employees device. The answer is that an employer cannot use Bushel to see mail or content on a device. This isn’t to say that you can’t use your Exchange, Office 365, or Google Apps administrative accounts to view your email. But Bushel doesn’t have anything to do with that.
Apple has a strong sense of privacy around devices. Devices should be able to be used to access your data (email, app content, etc) in such a way that you have no concern about the privacy of that data. You cannot view what someone is doing on a device unless that user specifically AirPlays their display to another device. You cannot see data as it’s being transferred to devices. You cannot see what Apple ID is used on a device.
But you can secure the data. You can silo your organizations data using Managed Open-In. This allows you to flag all data coming through mail accounts and apps that your organization gave a device so that those files cannot be copied to mail accounts and apps that your organization did not give a device. This doesn’t mean you can see those files, or access them. Only that you can control how they move within devices.
Overall, the privacy controls for iPads and iPhones are the most well thought out and well orchestrated security controls in the industry. A user can have a solid sense that their data is only able to be viewed by them, without concern that prying eyes are creeping on their devices. And an employer can have a sense of security that their data can be pulled from devices they own and BYOD devices, in the event that there is turnover or a device falls outside of their control.
Apple technology continues to flood the workplace and Apple management solutions are more relevant today than ever before. And it isn’t just traditional, large organizations that are using Mac, iPhone and iPad at work anymore. That’s why we created Bushel. Bushel is Mobile Device Management, simplified for smaller environments. We set out to help these small and medium-sized businesses by building a simple, cloud-based mobile device management solution from the ground up. We’re not trying to be everything to everyone. Instead, we’re focused on being awesome for smaller types of environments!
We are a part of a larger company – JAMF Software. And the fact that JAMF already makes another extremely awesome and fully featured device management tool leads to some great questions around how Bushel stacks up against a full-featured Apple management tool like the Casper Suite. Let’s take a look!
Bushel delivers a key set of MDM features to small and medium-sized workgroups. The Casper suite delivers all of these same features, but it does so much more as well!
•Integrate with DEP, VPP
•Security policies (passcode, managed open-in)
•Email server settings
•Remote Actions (reset passcode, lock, wipe, etc.)
•Filevault Key Escrow
•Activation Lock Bypass
•Different settings and apps for different devices with Blueprints
“If Apple IT is your job, you want a tool like the Casper Suite. If Apple IT is a task, Bushel is a workflow that let’s you get back to your primary work.”
If you’re interested in seeing what a simple yet powerful MDM solution looks like, signup for a free Bushel account today! And if you need a bit more than Bushel offers, you can explore the capabilities of the Casper Suite!
“Open in Management” is a feature in iOS that allows you to protect your data by only allowing data that is accessed by apps distributed by Bushel to open in other apps distributed by Bushel. Managed Open In therefore allows you to separate work and personal documents by restricting work documents to only be opened in managed applications.
For example, let’s say that you give your devices Pages and Box using Bushel, but some of them use Dropbox personally. If a user opens a document in Box then they will often want to move it to another app to actually edit the document. So they could move the document into Pages. But, they could not move the document into Dropbox and share the file back to themselves using that other service; unless of course we decided to distribute both box and Dropbox.
Open In Management limits which app can open a given file. However, Open In Management does not restrict the ability to cut/copy/paste content between documents. And options within given apps can still allow for data to leak out of your environment.
Open In Management is enabled by default in Bushel. To disable, you can login to your portal, click the Setup tab, click on Update for the Security options and then uncheck the box for Protect corporate data on mobile devices.”