iOS Hardening Configuration Guide - DSD

Find My iPhone user interface
Generally, when agency devices are used, this MobileMe account would be the same as the
iTunes account used to install agency owned apps, and set up prior to issuing the device.
Note that this requires a network connection, location services to be active, and the device to
have opted in to the “Find my iPhone” service.
Virtualisation
Some agencies may opt to present some agency applications to iOS devices over a network
via a Virtual Desktop Infrastructure (VDI), such as Citrix Receiver (e.g.
http://www.citrix.com/ipad) or VMWare View.
This works particularly well for users who are “micromobile” i.e. they move about a building
or a campus during their work day, and able to take advantage of the relatively high
bandwidth of a secure Wi-Fi network, but are not strictly away from the office location.
Solutions in this space ( such as Citrix XenApp version 6) provide an ability to tune the
application UI for a small screen suitable for presenting to mobile devices, rather than merely
presenting a remote session to the standard agency desktop resolution. Due to dependency
on network performance and differences in screen sizes and input device sizes, VDI based
solutions should be thoroughly tested from a usability perspective. This approach also has
the advantage that minimal agency data is stored on the device.
Note most major authentication token vendors have a soft token available for iOS.
Note that in some cases use of VDI is a classic usability/productivity trade off against
security, as the absence of locally cached data means users are not able to be productive
when the device is off the network, there is no integration with native applications running
locally on the end point device.
18 | D efence Signals Directorate