Afaria

Afaria. It is a comprehensive mobile device management (MDM) and mobile application management platform originally developed by XcelleNet and later owned by Sybase, a subsidiary of SAP AG. The software suite provides centralized administration for a wide array of mobile devices, including smartphones, tablet computers, and laptops, enabling IT departments to enforce policies, deploy applications, and secure corporate data. Following SAP's acquisition of Sybase in 2010, Afaria became a core component of the SAP Mobile Platform portfolio, competing with other enterprise mobility solutions like MobileIron and VMware AirWatch.

History

The platform's origins trace back to XcelleNet, a company founded in the early 1990s that specialized in remote control software and systems management. Initially focused on managing personal computers and point of sale systems, the company released the first version of its Afaria product in 1996, targeting the nascent field of mobile computing. In 2004, Sybase, a major player in enterprise software and database management systems, acquired XcelleNet to bolster its iAnywhere mobility division, integrating Afaria into its product lineup. The platform evolved significantly under Sybase, adding support for emerging devices like the BlackBerry, iOS-based iPhone, and later Android devices. The 2010 acquisition of Sybase by SAP AG for $5.8 billion further embedded Afaria within a broader enterprise resource planning ecosystem, leading to tighter integration with the SAP NetWeaver platform and other solutions like SAP BusinessObjects.

Features

Afaria provides a wide range of functionalities for enterprise mobility management, centered on an administrative web console. Key features include over-the-air (OTA) provisioning and configuration of devices, ensuring standardized settings across a device fleet. It facilitates software distribution and application lifecycle management, allowing IT administrators to push business software and updates to enrolled devices from a central application catalog. The platform includes robust inventory management capabilities, collecting detailed information on hardware, operating system versions, and installed applications. For data security, it offers remote wipe and remote lock functions, data encryption enforcement, and the ability to create secure containers that separate corporate information from personal data on devices, a concept known as bring your own device (BYOD).

Architecture

The system employs a client–server model, with the Afaria server typically deployed on-premises on Microsoft Windows Server or Linux operating systems. Server components include a management console, a database server (often Microsoft SQL Server or Oracle Database), and relay servers that help manage communications with mobile devices across different networks. The client-side Afaria Agent is a small software application installed on each managed device, which communicates with the server using protocols like HTTPS and OMA DM. This architecture supports scalability through load balancing and can integrate with existing corporate directory services such as Microsoft Active Directory for user authentication and policy assignment. The platform's design allows for the management of diverse operating systems, including Windows Mobile, Symbian, Windows Phone, iOS, and Android.

Deployment

Deployment of Afaria typically involves several phases, beginning with system requirements planning and server installation. Organizations must configure network infrastructure, including firewall rules to allow communication between devices and the Afaria server, often through specific TCP/IP ports. The enrollment process for devices can be initiated via several methods, such as sending an SMS with a registration link, emailing an enrollment token, or using QR codes. Large-scale deployments, such as those for global corporations or government agencies, may utilize a hierarchy of servers, including primary servers and regional servers, to optimize performance and comply with data sovereignty laws. Integration with other SAP systems, like the SAP Mobile Platform or SAP Afaria Cloud, offers hybrid and cloud-based deployment options.

Security

Security is a foundational pillar of the Afaria platform, addressing threats in the mobile security landscape. It enforces password policy and authentication mechanisms, requiring complex passwords or biometrics on devices. The software can mandate the use of device encryption for data at rest and control the use of peripherals like Bluetooth and USB ports to prevent data leakage. It provides geofencing capabilities to trigger security actions based on a device's geolocation. For network security, Afaria can configure and manage virtual private network (VPN) settings on devices to ensure secure access to corporate intranet resources. The platform also includes compliance monitoring and audit trail features, generating reports for regulations like the Health Insurance Portability and Accountability Act (HIPAA) and the Payment Card Industry Data Security Standard (PCI DSS), and can automatically remediate non-compliant devices by applying corrective policies or initiating a remote wipe.

Category:Mobile device management Category:SAP software Category:Proprietary software