Webex Management with IBM MaaS 360
It is possible for you to manage the Webex App on your users’ iOS and Android devices by using the integration between Webex and IBM MaaS 360 as an administrator.
Overview
Several MDM tools are supported by Webex such as IBM Security Maas360®, which provides integration capabilities with Webex. In summary, these tools provide you with an easy way to provision, configure and control your organization’s mobile applications, as well as manage permissions. As well as monitoring, managing, and securing corporate mobile devices used in your organization, these applications also help you keep an eye on them.
The MaaS360 platform allows you to enroll and manage Webex users on private and corporate devices via the MaaS360 system.
I have created this document to assist you in uploading the Webex App for Android or iOS to your MaaS360 app catalog, configuring the app, and distributing it.
Prerequisites
-
It is necessary that you have an administrator account with MaaS360.
-
It is necessary for you to have an administrator account for Webex.
-
If your organization has a security policy that requires Android devices and/or iOS devices to be enrolled and compliant, then that is a great start.
-
You are required to provision users in your Webex organization (in the Control Hub) before you can use them.
Click here to see how to create a Control Hub organization and add users to it.
Deploy Webex App to Android Devices
- Go to https://login.maas360.com in order to log into your MaaS360 portal.
- After clicking on Apps, you will be taken to the Catalog page.
- Select Google Play App from the list of Android apps that can be added by clicking Add > Android
- Look for the term “Cisco Webex” in the search engine.
You may see more than one Cisco app. Choose the one that says “Cisco Webex” from the list.
- In order to approve the Webex app for your organization, click on Select and Approve Webex App.
- Approve the default permissions of the app (give the app permission to have access to your data).
You should now be able to see the app in your app catalog after it has been approved.
- You can find the App Catalog in the Apps section
- Click on the Webex icon and then click on Distribute.
On the devices of the selected users, the Webex App is installed.
Configure Android MDM Policy
- Navigate to the Security > Policy Management > Policies section of the MAAS360 portal.
- Add a policy by clicking the Add policy button and entering/selecting the following values:
-
A name should be entered (e.g. Webex for Android), and a description should be entered (e.g. Collaboration app).
-
In the Type field, select Android MDM as the type.
-
If you want to start with a Business Template-based Policy, then select that option.
-
When choosing the Business Usecase, choose either BYOD (Bring Your Own Device) or Corporate Owned (Respective of the type of devices you want to govern).
- Please click the Continue button to continue.
- In order to configure the app, you will have to open the Security page of the new policy as well as the Restrictions page.
If you are interested in learning more about the options you can select on these pages, you can read the topic Supported Restrictions in this article.
Deploy Webex App to iOS Devices
- Go to https://login.maas360.com in order to log into your MaaS360 portal.
- After clicking on Apps, you will be taken to the Catalog page.
- Choose the iTunes App Store App from the Add > iOS menu
- Add “Webex” by searching for it and selecting it, then clicking on the Add button.
The Cisco app may appear in more than one place on your screen. It is recommended that you select “Webex” as the option.
- You can find the App Catalog by clicking on Apps.
- Choose Webex (for iOS) from the list of options.
- Make sure that Update Automatically is checked in the Install Settings section.
- In the Security Policy window, select the devices on which you want Webex to work, and make sure the following policies are enabled:
-
Block the Webex backup to iTunes stores when the Prevent Data Backup to iTunes option is selected.
-
Delete the Webex App from the MaaS360 portal, or stop the distribution of the Webex App, and the VPP license will be revoked, which revokes the VPP license (Volume Purchasing Program).
-
On stopping MDM control over the device, the Webex App is automatically removed from the mobile device of the user when they stop MDM control over it.
-
Once the distribution of Webex App to the group has been stopped, the Webex App will automatically be removed from the mobile device of the recipient.
-
The Webex App will be deleted from the user’s mobile device when you perform a selective wipe on the mobile device, and this will remove the Webex App from the device.
-
A webex app can be restricted from being uninstalled by the user in order to prevent the user from doing so.
- If you scroll down and click on App Configuration, you will find an option to add configurations.
It opens a new Webex configuration page, with a tab titled Configuration, where you can configure Webex as needed.
- Depending on your needs, you may need to modify the following settings in the AppConfig community:
-
The length of time it takes for a screen to be locked in seconds refers to the amount of time a user must be inactive before the screen is locked (in the foreground Webex App).
-
If the application copy and paste function in Webex is disabled, users will not be able to copy content from Webex and paste it into their personal application running on their mobile device. No restrictions are imposed on the user with regard to copying from Webex to other applications that are managed.
-
MaaS360 can prepopulate the user’s email address during login to Webex by placing the user’s email address in a variable where it can be inserted.
- On the left side of the page, you will find a tab called Distribution at the top.
- The Webex App for iOS will be distributed to the iOS devices of the selected Webex user group as soon as you click Publish.
Configure iOS MDM Policy
Before you begin
- Navigate to the Security > Policy Management > Policies section of the MAAS360 portal.
- Add a policy by clicking the Add policy button and entering/selecting the following values:
-
Then, enter a name for the app (e.g. Webex for iOS) and a description for the app (e.g. Collaboration app).
-
In the Type field, select iOS MDM as the device type.
-
If you want to start with a Business Template-based Policy, then select that option.
-
When choosing the Business Usecase, choose either BYOD (Bring Your Own Device) or Corporate Owned (Respective of the type of devices you want to govern).
- Please click the Continue button to continue.
- In order to configure the app, you will have to open the Security page of the new policy as well as the Restrictions page.
If you are interested in learning more about the options you can select on these pages, you can read the topic Supported Restrictions in this article.
Supported Policies
Passcode/TouchID
Passcodes or TouchIDs can be configured for users who choose to use them. In order to use the Webex app on a mobile device, the user needs to enter a passcode when launching the app.
Maximum PIN attempts
A user should be allowed to enter an incorrect PIN a maximum of three times.
Managed Open-In/Document Sharing
Provide a way for Webex app documents to be shared with other policy-managed applications.
Prevent App Backup
Ensure that users are not able to backup data from Webex to the Android/iOS backup service.
Disable Screen Capture
(Android) Blocks the ability to capture screen shots and to use Google Assistant.
There is an option to restrict this feature at the level of the OS for iOS users.
Remotely Wipe App
Provide administrators with the option of remotely wiping a mobile device from Webex.
Disable Copy and Paste
Stop users from copying and pasting from Webex to unmanaged apps. Other corporate policy-managed applications, however, can allow copying and pasting