Sophos Mobile Control Architect (MOBA)

This course provides an in-depth study of Sophos Mobile Control, designed for experienced technical professionals who will be planning, installing, configuring and supporting deployments in production environments. The course is intended to be delivered in a classroom setting, and consists of presentations and practical lab exercises to reinforce the taught content. Printed copies of the supporting documents for the course will be provided to each trainee. Due to the nature of delivery, and the varying experiences of the trainees, open discussion is encouraged during the training.

 

Objectives

On completion of this course, trainees will be able to:

  • Understand the components of Sophos Mobile Control (SMC) and how to configure them.
  • Architect a solution for a customer’s environment and needs.
  • Implement proof of concept (PoC) deployments with SMC.
  • Configure the components of SMC according to best practice.
  • Perform basic troubleshooting.


Target audience

This course is designed for experienced technical professionals who will be planning, installing, configuring and supporting deployments in production environments. And for indivudials wishing to obtain the Sophos Mobile Control Certified Architect certification.


Prerequisites

Prior to taking this training you should:

  • Have completed and passed the Sophos Mobile Control – Certified Engineer course
  • Be able to setup a Windows Active Directory environment with servers and workstations.
  • Have experience of Windows networking and the ability to troubleshoot issues.
  • Understand the principles of DMZs, proxies and reverse proxies.
  • Have experience using Microsoft SQL Server and Microsoft Exchange Server.
  • Have experience with webservers or other web facing infrastructure.
  • Be familiar with iOS, Android and Windows Phone 8 mobile devices.


Certification

To achieve the Sophos Certified Architect certification in Mobile Control trainees must take and pass an online assessment. The assessment tests their knowledge of both the taught and practical content. The pass mark for the assessment is 80%, and it may be taken a maximum of three times.


Duration

2 days


Course Modules

Module 1: Solution overview and architecture

  • Solution overview
  • Architecture
  • Ports and protocols
  • Public Key pinning
  • SCEP
  • High availability
  • Sizing
  • On premise vs. SMCaaS
  • SaaS
  • Sophos SMCaaS architecture


Module 2: Installation

  • Support devices
  • Server requirements
  • SSL certificate
  • APNS certificate
  • Pre-installation checks
  • Installation
  • Post-installation configuration
  • Creating a customer
  • Administrator roles
  • APNs certificates
  • Cluster configuration
  • Troubleshooting


Module 3: Customer configuration

  • Customers overview
  • Super admin customer configuration
  • Configuration inheritance
  • Customer configuration
  • SCEP
  • Client configuration
  • User specific settings
  • Device configuration
  • Applications
  • Profiles
  • Policies
  • Task bundles
  • Device management
  • Compliance rules
  • Unenrolling and deleting devices
  • Troubleshooting


Module 4: Device configuration and management

  • Container security
  • Email
  • Documents
  • Document encryption
  • Browser


Module 5: Sophos Mobile Security

  • Sophos Mobile Security overview
  • Scanner
  • App reputation
  • App Protection
  • App Protection vs App Control
  • Sophos Mobile Security Guard
  • Management
  • Troubleshooting


Module 6: Samsung KNOX

  • Overview
  • Licensing
  • Profiles
  • Restrictions
  • Premium restrictions
  • Apps
  • Task bundle actions
  • Compliance
  • Device experience


Module 7: EAS-Proxy

  • Overview
  • Lotus Notes Traveler
  • Deployment scenarios
  • High availability
  • Certificate based authentication
  • Installation
  • Logs
  • Troubleshooting


Module 8: Network access control

  • Network access control overview
  • Sophos UITM
  • NAC API
  • Troubleshooting


Module 9: Server maintenance

  • Daily maintenance
  • Software upgrade
  • License upgrade
  • Renewing an APNs certificate
  • Backup and restore
  • Changing server name