Everything about the ace up the sleeve of Samsung security, Knox: suite of applications, integrated solutions, devices running, usage scenarios

Time 26/02/2022 By myhoneybakedfeedback

connect: We know Knox is Samsung's "guardian." Can you explain to us in easy-to-understand terms what it is and what it does?

Ovidiu Seceleanu: Under the name of Samsung Knox there is a suite of software applications for the management of mobile devices, mobile applications, security, scanning process but also functionalities included since the production phase in Samsung mobile devices.

connect: Can Knox replace an antivirus and block attacks, or should those who buy a Samsung device need a dedicated solution?

Ovidiu Seceleanu: Samsung Knox covers many security areas on local devices, from physical security, biometrics, enrollment based on IMEI, checking the integrity of the operating system, separating business data and encrypting them through container technology (n.red: separating business and personal life), controlling operating system versions and applying security patches, setting up APNs, VPN tunnels, installing certificates, limiting running applications and sites that can be accessed (whitelist), connecting only to approved WLAN access points, limiting the operation of business applications only in a certain geographical area and much more. All this is done remotely, from Knox cloud management consoles, according to the security policy of each organization.

Knox's portfolio of solutions does not contain an antivirus solution, where many well-known global players are active, including a Romanian one. However, as with PCs, every mobile device should be protected with antivirus solutions. Samsung flagships come with a pre-installed McAfee solution. You can find it in the settings at Device Care -> Device Protection. Operators offer this service either in subscriptions or must be purchased separately. This is for individual users.

For companies, a business-type antivirus solution should be chosen, with a central management console, which can implement the security policies of each organization, solutions that can be installed through Samsung Knox Suite, remotely, without local user intervention on device.

connect: Samsung Knox also offers a solution for parental control. How can it be activated and to what extent can the activities that you can perform on a device be restricted?

Ovidiu Seceleanu: Parents are already using Samsung Kids as a personal parental control solution.

Samsung Knox Configure can be used to develop parental control applications, only someone needs to take on the role of determining what content and for which age groups these profiles should be applied. We have global partners who have developed such solutions:

https://www.samsungknox.com/en/success-stories/lgu

In Romania, we are waiting for local developers to come up with a solution, and we provide them with the necessary tools.

Knox suite of functions

connect: We know that Samsung Knox offers IT and business administrators a suite of solutions to meet the needs of businesses. Basically, a smartphone can be turned into a business tool or companies can add restrictions on work phones. What are the most important elements that define the Knox universe for the B2B area?

Ovidiu Seceleanu: There is a solution package, Knox Suite, which contains several modules:

In addition, we have other software components that can be activated independently or in conjunction with others, such as:

connect: Knox Capture is a feature recently inaugurated by Samsung and is used by those in the front line, ie by employees who work behind all the big malls, in the supermarket warehouses, etc. What are the key features and how easily can it be integrated?

Ovidiu Seceleanu: Knox Capture eliminates the need to purchase an additional scanning device. It is installed on a rugged Xcover or Tab Active device. Each time the code is scanned, it is automatically sent to the application waiting for that code. There is nothing to integrate, no application to develop, the code is sent to the designated application in the configuration. A unique feature is that the application can scan multiple codes at the same time, at the pallet level if they are visible, not just individual codes. To increase productivity, an additional key can be associated with the scan function.

Productivity and security at the forefront

connect: Can you give us some examples of scenarios where Samsung devices are used in Romania, scenarios that improve the work experience of employees and employers?

Ovidiu Seceleanu: If we refer to rigid devices, resistant to dust, water, shocks, accidental falls, the most visible areas of use are in the field of transport companies, logistics, distribution and retail companies, which have mobile employees, work in environments heavy and for which the Knox application suite offers productivity to employees, but also to mobile fleet managers, who never have to touch these devices to be able to do their management and security. Employers are confident that these devices are used exclusively for the purpose for which they were purchased, are secure, cannot be leaked and comply with the GDPR. There are also employers who agree to use mobile devices for both business and personal purposes, but provided that the two areas are clearly separated, using Samsung's unique containerization technology, hard and soft, not just soft.

During the pandemic, customers in the educational area used Samsung and Knox Manage tablets to be able to enroll and manage them. Also, in Bucharest can be seen rugged devices used by the mayor's office to manage parking lots.

Another example is that of service companies that offer rugged devices, tablets and phones to field people.

Outside the scope of these devices, we find Samsung devices and various Samsung Knox modules in many areas of activity, from the banking financial sector, the public sector, insurance, HoReCa, services to distribution companies, pharmacy chains and even betting companies. .

connect: We know that Samsung and Microsoft have developed a partnership that has brought the Walkie Talkie feature back to the forefront on some devices. What devices works and how can you use them? Is the encryption part also done through Knox or are we talking about other protocols that underlie this function?

Ovidiu Seceleanu: The partnership with Microsoft covers three main areas:

The devices that offer this latest integration are Xcover 5, Xcover Pro and Tab Active 3, all rugged. Encryption, but also many other security features: device enrollment, application management, but also the allocation of dedicated buttons is done through Knox Suite, available for one year free on rugged devices, in the Enterprise Edition version.

How to turn your phone into a POS

connect: There are many other solutions based on the secure Samsung Knox platform. For example, Alpha PhonePOS is a solution implemented in Romania that turns a phone into a POS for contactless payments. We know that the security standards and requirements of VISA or Mastercard are met, and the basis is a Samsung solution. Can you give us more details?

Ovidiu Seceleanu: We suggest the use of rigid devices in the role of mobile POS, the same as the Walkie Talkie in Teams and Knox Capture: Xcover 5, Xcover Pro and Tab Active 3. There is also a promotion of an ongoing operator, which also contains a data plan for companies that want to use them for card payments. As these devices contain Samsung Knox Suite, we use these software components to enroll stiffened devices, install the POS mobile application, but also other necessary business applications, such as retail, customize them to make them secure and dedicated devices. this delicate payment process.

connect: Samsung has a range of rugged devices in its portfolio that are known for their durable hardware. Can you tell us which rugged terminals are available in Romania and whether they are also equipped with Knox suite functions?

Ovidiu Seceleanu: All Samsung stiffened devices are available in the Enterprise Edition version in Romania: Xcover 5, Xcover Pro, Tab Active 3 and Tab Active Pro. This is how we market them on B2B channels, exclusively in the Enterprise Edition version, which, in addition to offering 5 years of security patches and two years of availability from the release date, also contains a one-year license of Knox Suite that offers four essential components. Knox: Mobile Enrollment, Manage, Platform for Enterprise and E-FOTA One. Customers who benefit from Knox Suite when purchasing an Enterprise Edition device also get a surprise when they renew: a 50% discount for extending their license by another year or two.