Guest User!

You are not Sophos Staff.

This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Sophos Enterprise and Tablets

Can bypassing POA or PBA allow tablets to load Windows 7 and activate the soft keyboard for login. Would one still be protected? My guess just by testing and reading a little is yes. I would like to hear from others on this option as tablets are becoming much more common in our work environment.

Thanks

FB

:26277


This thread was automatically locked due to age.
  • Yes and No, POA on is the most secured however integration with tablets and other touch screen devices is always iffy because nobody wants to open source any specs, create open API's for using the hardware for these things, and a lot of manufacturers do bad stuff like use binary loaded in a driver for firmware to get to market faster and fix problems after release. So you'll get some protection for tablets which don't carry much data it should be enough. In our case tablets are glorified handheld thin clients using either citrix, appv, or thinapp and all the data paths are network based to save stuff. No data of any consequence actually gets stored on the device typically under most circumstances.
    :26357
  • Hi FB,

    tablet devices in general work with SGN (and also with POA enabled) but as we currently have no pen / stylus support, logging on with a Keyboard or a Mouse + POA's virtual Keyboard is required on some devices.

    The best option would of course be a fingerprint reader on the tablet so you can authenticate at POA using your fingertip.

    Alternatively, you could also have the POA run in autologon mode and perform the logon on Windows level.

    Cheers,

    Chris

    :26671
  • ChrisD:

    I've tried this on many tablet varities and the FreeBSD POA environment does not work with many of the intel atom based tablet system touchscreens (we have many from several manufacturers) because the tablets use driver loaded firmware modules and unfortunately the manufacturers weren't willing to build any kind of BSD or Linux kernel space or user space driver for it so there's no way I could expect SafeGuard to work in that instance.  SGN still "works" mind you just you can't use POA on a lot of models is the only catch.

    :27241