
<p>Microsoft EM+S solution provides a response to the huge challenge facing companies that need to safely and efficiently manage an increasingly mobile workforce, the Bring Your Own Device (BYOD) trend and Identity Management. Microsoft EM+S is a cloud-based offering (SaaS), ; licensed on a per user base. ;</p>



<div class="wp-block-image"><figure class="aligncenter is-resized"><img src="http://www.thecloudxperts.co.uk/wp-content/uploads/2018/11/image-6.png" alt="" class="wp-image-411" width="511" height="443"/></figure></div>



<p><br></p>



<h2 class="wp-block-heading">Components of Enterprise Mobility + Security (EM+S)</h2>



<table class="wp-block-table aligncenter is-style-stripes"><thead><tr><td>
 <strong>Component</strong>
 </td><td>
 <strong>Summary</strong><strong></strong>
 </td></tr></thead><tbody><tr><td>
 Azure Active Directory Premium
 </td><td>Identity and Access Management Solution, ;<br>Control identity + access in the cloud and provide <g class="gr_ gr_25 gr-alert gr_spell gr_inline_cards gr_run_anim ContextualSpelling ins-del multiReplace" id="25" data-gr-id="25">identity driven</g> solution<br><br></td></tr><tr><td>
 Microsoft Intune
 </td><td> Mobile Application and Mobile Device Management Solution </td></tr><tr><td>
 Azure Information Protection
 </td><td>
 Data and
 Information Protection Solution
 </td></tr><tr><td> Microsoft Advanced Threat Analytics / Advance Threat Protection</td><td> Cybersecurity and Risk Management Solution<br><br> </td></tr><tr><td><br>Cloud Apps Security ;  ;  ;  ;  ; ;</td><td> ;Keep you in control, through improved visibility into activity.</td></tr></tbody></table>



<p></p>



<figure class="wp-block-image"><img src="http://www.thecloudxperts.co.uk/wp-content/uploads/2018/11/image-1.png" alt="" class="wp-image-368"/></figure>



<p></p>



<h2 class="wp-block-heading">Azure Active Directory Premium<br></h2>



<p>Staying in control of your identity security has never been more important and cloud identity and access management is vital. With industry-leading solutions such as conditional access, identity protection and password protection, Azure AD holds the key.</p>



<p>Your employees can sign into almost any service regardless of <g class="gr_ gr_3 gr-alert gr_gramm gr_inline_cards gr_run_anim Grammar only-ins replaceWithoutSep" id="3" data-gr-id="3">device</g> model, location, or user identity. i.e</p>



<ul class="wp-block-list"><li>File Servers</li><li>Email</li><li>Application Servers</li><li>Database Servers</li><li>Cloud-based Applications</li><li>Third Party &; Bespoke Applications</li><li>Mobile and On-premise Devices</li></ul>



<p>The big deal about ;Azure Active Directory Premium is this: it enables single-sign-on to cloud software ;<strong><em>and ;</em></strong>on-premise software. With one password you can access almost everything, including ;<a href="https://azure.microsoft.com/en-us/marketplace/active-directory/all/">thousands of SaaS cloud apps</a>.  ;Other useful features include:</p>



<h4 class="wp-block-heading"><strong>Azure Active Directory Offers:</strong></h4>



<ul class="wp-block-list"><li>Self-service password reset to reduce helpdesk calls</li><li>Multi-factor authentication options for greater security</li><li>Group-based provisioning and single sign-on for thousands of SaaS apps</li><li>Machine learning-driven security reports for visibility and threat management</li><li>Robust sync capabilities across cloud and on-premises directories</li><li>Conditional access: block people from logging in based ;on various factors</li><li>Reporting on logins and the meta-data associated with access requests</li><li>Identity and Access Management with advanced protection for Users and Privileged ;users<br></li></ul>



<figure class="wp-block-image"><img src="http://www.thecloudxperts.co.uk/wp-content/uploads/2018/11/Azure-AD.jpg" alt="" class="wp-image-369"/></figure>



<p></p>



<h2 class="wp-block-heading"><strong>Microsoft Intune</strong></h2>



<p>Microsoft ;<em>Intune</em> ;is a cloud-based enterprise mobility management (SaaS) product that helps organizations to manage the mobile devices, have the productive workforce, consistent and secure access to corporate resources and data from any location on any device. ;</p>



<p>Microsoft Intune ;allows you to link an unlimited number of mobile devices to an employees’ Active Directory profile.  ;Microsoft Intune is your secure link between an employee’s mobile device (iOS, Android, Windows) and corporate data.</p>



<h4 class="wp-block-heading">Microsoft Intune offers:</h4>



<ul class="wp-block-list"><li>Mobile application management across devices</li><li>Broad device support for iOS, Android, Windows and Windows Phone devices</li><li>Selective wipe of apps and data for greater security</li><li>Use of System Center Configuration Manager and Endpoint Protection</li><li>Secure Access to Emails, On-premise and cloud applications ;</li><li>Secure access to company data using Microsoft Apps</li></ul>



<div class="wp-block-image"><figure class="aligncenter is-resized"><img src="http://www.thecloudxperts.co.uk/wp-content/uploads/2018/11/image-2.png" alt="" class="wp-image-372" width="436" height="399"/></figure></div>



<p></p>



<h2 class="wp-block-heading">Azure Information Protection (AIP)</h2>



<p><em>Azure Information Protection</em> ;(sometimes referred to as ;<em>AIP</em>) is a cloud-based solution that provides document-level security. The organisation can ;<br>add persistent classification, labelling and ;<em>protection</em> ;of the sensitive ;<em>information</em> ;they share both internally and externally with Microsoft ;Azure Information.</p>



<div class="wp-block-image"><figure class="aligncenter"><img src="http://www.thecloudxperts.co.uk/wp-content/uploads/2018/11/image-3.png" alt="" class="wp-image-375"/></figure></div>



<h4 class="wp-block-heading">Azure Rights Management offers:</h4>



<ul class="wp-block-list"><li><strong>Classification and labelling: ;</strong> ;Configure policies to classify, label and protect data based on its sensitivity. Classification with Azure Information Protection is fully automatic, driven by users or based on a recommendation.</li><li><strong>Intelligent classification</strong> and encryption for files and emails shared inside and outside your organization with P2 Licence</li><li><strong>Encryption and rights management: ;</strong>Encrypt your sensitive data and define usage rights when needed.</li><li><strong>One-click process: ;</strong>Apply protection easily without interrupting your employee&#8217;s normal course of work. ;Data classification and protection controls are integrated into Microsoft Office and common applications to secure the data you’re working on with one click</li><li><strong>Tracking and reporting: ;</strong>See what’s happening with your shared data to gain more control over it. ;Track activities on shared data and revoke access if necessary.</li><li><strong>Deployment and management flexibility: ;</strong>Help protect your data whether it’s stored in the cloud or in on-premises infrastructures. You have the flexibility to choose how your encryption keys are managed, including Bring Your Own Key (BYOK) options.</li></ul>



<p></p>



<h2 class="wp-block-heading">Microsoft Advanced Threat Analytics (ATA/ATP)</h2>



<p><strong>Advanced Threat Analytics</strong> ;<strong>ATA ;</strong>is an on-premises platform that helps protect your enterprise from multiple types of advanced targeted cyber attacks and insider threats by using information from multiple data-sources in your network to learn the <g class="gr_ gr_7 gr-alert gr_spell gr_inline_cards gr_run_anim ContextualSpelling multiReplace" id="7" data-gr-id="7">behavior</g> of users and other entities in the organization and build a behavioural ;profile about them. ;</p>



<p>ATP is available with E5, ; In contrast, Azure ATP exists as a hybrid solution rather than solely on-premise. Azure ATP parses network traffic via on-premise ATP sensors, which function very similarly to ATA gateways, but all parsed data is sent to the Azure cloud for analysis and reporting. Instead of a local ATA console, all information is presented in the cloud by the Azure ATP workspace portal.</p>



<p>ATA leverages a proprietary network parsing engine to capture and parse network traffic of multiple protocols (such as Kerberos, DNS, RPC, NTLM<g class="gr_ gr_9 gr-alert gr_gramm gr_inline_cards gr_run_anim Punctuation multiReplace" id="9" data-gr-id="9"> ;.</g> This information is collected by ATA via:</p>



<ul class="wp-block-list"><li>Port mirroring from Domain Controllers and DNS servers to the ATA Gateway and/or</li><li>Deploying an ATA Lightweight Gateway (LGW) directly on Domain Controllers</li></ul>



<h4 class="wp-block-heading"><strong>Advanced Threat Analytics Features:</strong></h4>



<ul class="wp-block-list"><li>Behavioural analytics for advanced threat detection</li><li>Detection for known malicious attacks and security issues &; surfaces the information in the ATA Console.</li><li>Simple, actionable feed for the suspicious activity alerts and the recommendations ;including a clear view of Who, What, When and How.</li><li>Integration with your existing Security Information and Event Management (SIEM) systems</li><li>Alert for known risks</li></ul>



<h4 class="wp-block-heading" id="what-does-ata-do">What does ATA do?</h4>



<figure class="wp-block-image"><img src="http://www.thecloudxperts.co.uk/wp-content/uploads/2018/11/image-4.png" alt="" class="wp-image-377"/><figcaption><br><br></figcaption></figure>



<h2 class="wp-block-heading"><br>Microsoft Cloud App Security ;<br></h2>



<p>It&#8217;s a comprehensive solution that can help <g class="gr_ gr_6 gr-alert gr_gramm gr_inline_cards gr_run_anim Grammar only-ins replaceWithoutSep" id="6" data-gr-id="6">organization</g> as you move to take full advantage of the cloud applications, but keep you in control, through improved visibility into activity. Can provide you with the same level of on the premise security to your cloud applications. This feature is only <g class="gr_ gr_5 gr-alert gr_spell gr_inline_cards gr_run_anim ContextualSpelling ins-del multiReplace" id="5" data-gr-id="5">availble</g> with E5. </p>



<h4 class="wp-block-heading">Cloud Apps Security Features ;</h4>



<ul class="wp-block-list"><li><strong class="">Cloud Discovery</strong>: Discover all cloud use in your organization, including Shadow IT reporting and control and risk assessment, ;<br>sanction or unsanction apps in your organization by using the ;<em>Cloud app catalog.</em></li><li><strong>Data Protection</strong>: Monitor and control your data in the cloud by gaining visibility, enforcing DLP policies, alerting and investigation.</li><li><strong>Threat Protection</strong>: Detect anomalous use and security incidents. Use <g class="gr_ gr_9 gr-alert gr_spell gr_inline_cards gr_run_anim ContextualSpelling multiReplace" id="9" data-gr-id="9">behavioral</g> analytics and advanced investigation tools to mitigate risk and set policies and alerts to achieve maximum control over network cloud traffic.</li><li><strong>Conditional Access App Control protection ;</strong>Microsoft Cloud App Security Conditional Access App Control utilizes reverse proxy architecture to give you the tools you need to have real-time visibility and control over access to and activities performed within your cloud environment.</li><li><strong>Policy Controls</strong>You can use policies to define your users&#8217; <g class="gr_ gr_126 gr-alert gr_spell gr_inline_cards gr_run_anim ContextualSpelling multiReplace" id="126" data-gr-id="126">behavior</g> in the cloud. Use policies to detect risky <g class="gr_ gr_127 gr-alert gr_spell gr_inline_cards gr_run_anim ContextualSpelling multiReplace" id="127" data-gr-id="127">behavior</g>, violations, or suspicious data points and activities in your cloud environment. If needed, you can use policies to integrate remediation processes to achieve complete risk mitigation. ;</li></ul>



<div class="wp-block-image"><figure class="aligncenter is-resized"><img src="http://www.thecloudxperts.co.uk/wp-content/uploads/2018/11/proxy-architecture.png" alt="" class="wp-image-378" width="415" height="375"/></figure></div>

