UEM, or unified endpoint management, is software for monitoring, managing and securing all of an organization’s end-user devices—desktops and laptops, smartphones, tablets, wearables and more—from a single console, regardless of operating system or location. UEM strengthens endpoint security by simplifying it, enabling security and IT teams to protect all endpoint devices using one tool in one consistent way.
A relatively new technology, UEM combines the capabilities of legacy mobile management solutions—including MDM (mobile device management) and MAM (mobile application management)—with those of tools used to manage on-premises and remote PCs. Already popular for managing BYOD (bring your own device) programs and hybrid (mixed on-premises and remote) workforces, UEM's use has exploded as security and IT departments adapt to support expanded work-from-home (WFH) initiatives in the advent of the COVID-19 pandemic. This trend figures to continue for the foreseeable future: OMDIA’s 2021 Future of Work Survey (link resides outside ibm.com) reports that 58% of employees will either be primarily home-based or will work in a hybrid style moving out of the pandemic.
Enhance your endpoint security with UEM
UEM is the latest in a series of mobile security management tools—tools that emerged and evolved in response to the changing relationship between organizations, employees, mobile devices and working styles over the last two decades.
The first mobile devices introduced in the workplace were company-owned, and mobile device management (MDM) tools were developed to enable IT administrators to manage and secure these devices. MDM tools gave administrators total control over all features of a device. They could provision, enroll and encrypt devices, configure and control wireless access, install and manage enterprise apps, track the location of the devices, and lock and wipe a device if it was lost of stolen.
MDM was an acceptable mobile management solution until smartphones became so popular that employees wanted to use their personal smartphones for work (instead of carrying both a work and a personal device). BYOD was born. And soon, employees bristled at surrendering total control of their personal phones and personal data to MDM.
A new solution, mobile application management (MAM), emerged. Instead of focusing on management control of the entire mobile device, MAM focused on app management. With MAM, administrators could take total control over corporate apps and the corporate data associated with them; they could also exercise just enough control over employees’ personal apps to protect corporate data, without touching or even seeing employees’ personal data.
But MAM solutions also found their limits, most of which resulted from their sheer inability to keep pace with the explosion of new apps employees might add to their iOS or Android devices. In response, vendors combined MDM, MAM and some related tools to create enterprise mobility management (EMM) suites. EMM provided the corporate data security of MDM, the superior employee experience of MAM, and management and security control over all devices used outside of the office—not only smartphones, but off-site laptops and PCs too.
EMM left one final endpoint management gap (and potential security vulnerability). Because it didn’t offer capabilities for managing on-site end-user devices, it required administrators to use separate tools and policies for on-site and off-site device management and security. This created additional work, confusion and opportunity for error—at right about the same time that more employers were trying to let more employees work from home.
UEM emerged as the solution to this problem. It combines the functionality of EMM with the capabilities of client management tools (CMTs) used traditionally to manage on-premises PCs and laptops. Most UEM tools also include, integrate or interact with endpoint security tools such as antivirus and anti-malware software, web control software, user and entity behavior analytics (UEBA) solutions, integrated firewalls and more.
Using multiple endpoint management tools to manage and secure different endpoint devices in different locations results in lots of manual and repeated work for security and IT teams—and increases the opportunity for inconsistencies, misconfigurations and errors that can leave the endpoints and the network vulnerable to attack. UEM greatly reduces the work and the risk—by creating a single, central dashboard where IT administrators and security teams can view, manage and secure every endpoint device connected to the enterprise network.
UEM tools work across all PC and mobile operating systems including Apple iOS and MacOS, Google ChromeOS and Android, Linux, and Microsoft Windows. (Some solutions may also support the Blackberry OS and Windows Phone mobile operating systems.) Many UEM solutions also support printers and other end-user IoT devices, smartwatches and other wearables, virtual reality headsets, virtual assistants—anything that an employee or business partner might use to connect to the network and get work done.
UEM is aware of all devices on the network no matter the type of connection, how often they connect, and where they connect from. It can even discover connected devices that administrators or security teams aren’t aware of, in real time.
From this central dashboard administrators can perform or automate critical management and security tasks for any or all devices, including:
The bottom line is that for these and other tasks, UEM’s all-encompassing approach enables security and IT departments to ignore the distinctions between on- and off-site devices, mobile and desktop devices, Windows or Mac or Chrome or Linux operating systems—and focus simply on device and security management.
As mentioned above, UEM evolved from the collision of changing technologies for managing and securing organizations BYOD policies, increasingly hybrid workforces, and expanding work-from-home programs. But organizations adopt UEM to support other strategic management and security initiatives, including:
Simplified regulatory compliance. Hybrid workforces can add to the complexity of demonstrating and enforcing compliance with industry and data privacy regulations. UEM solutions can help cut through that complexity. For example, UEM enables an organization to set a single policy that ensures every device complies with the encryption requirements specified by GDPR (General Data Protection Regulation), HIPAA (Health Insurance Portability and Accountability Act) and other data privacy regulations. UEM data isolation and application control capabilities help administrators ensure that only authorized applications or mobile apps can access highly regulated data.
Zero trust security. In a zero trust security approach, all endpoints are considered hostile by default. All entities—users, devices, accounts—are granted the least privileged access required to support their jobs or functions, and all entities must be continuously monitored and regularly re-authorized as access continues. UEM can support zero trust implementation in several ways—from simplifying the provisioning of all devices for least privileged access, to providing real-time visibility into every device connected to the network.
Transform how you manage and protect laptops, desktops, smartphones, tablets, wearables, IoT and purpose built devices with with AI-driven unified endpoint management (UEM).
Explore UEM solutions for all endpoint management use cases including mobile device management (MDM), enterprise mobility management (EMM), bring your own device (BYOD) and mobile security.
Deliver BYOD security for your mobile workforce while increasing mobile productivity, reducing costs, and building employee trust.
See the future of security in this work-from-anywhere world. Learn about the new trend of convergence of endpoint security, UEM and EDR/XDR.
Learn about the similarities and differences between advanced endpoint protection, laptop management and risk-based application patching.
Find the solution that best fits your needs and learn what IBM offers as one of the leaders in the UEM.
Learn more about differences between mobile device management and mobile application management, in order to make sure your mobile devices, users and data remain protected.
With IBM Security MaaS360 you will merge efficiency and effectiveness by managing any existing endpoints, and protecting them with evolved native endpoint security capabilities such as threat management, identity and access management (IAM) and more. MaaS360 lets you scale your remote workforce and BYOD initiatives, helping you build a strong cybersecurity posture. And with Watson, you can take advantage of AI-driven insights extracted from vast volumes of endpoint data.