Video
The E5 Mobile Blind Spot: Why Identity Alone Doesn’t Secure the Device
A well-configured Microsoft E5 deployment still has a gap, because MFA passing says nothing about whether the personal phone behind it carries malware or runs an out-of-date operating system. Corrata Identity Gate checks the device is secure before access is granted.
Read the transcript
The blind spot in a Microsoft E5 deployment
If you’re a CISO running Microsoft E5 across your organisation, you could have a mobile blind spot.
Picture this. Someone enters SharePoint off a personal phone, MFA passes, but we have no idea whether the device that they’re accessing is secure enough to do so. Identity is great in that it confirms that the user is legitimate, but it gives us very little information on the device that they’re connecting through.
What we found when we scoped an E5 customer
We recently scoped an organisation that had E5 products deployed across their full business configured really, really well. But where that was letting them down was their users connecting into the environment of personal devices. They knew that the individual was legitimate, but they had no idea if there was malware present, out of date operating systems, or any vulnerabilities on the devices that they were connecting off.
Why we built Identity Gate
This is exactly why we built IdentityGate.
Once that user connects through or tries to connect through with the environment, we are confirming that the device that they are coming through on is secure enough to enter and isn’t going to open up any security risks. So if I was to ask you now, if you had to audit all the users coming through your identity product, how many of those users would be accessing off personal devices, and how many of those devices do you have any insight into?
See Corrata on your own devices
A short call, a live look at the product, and a straight answer on whether it fits your estate.