SAP Mobile Secure Rapid Deployment Solution

1. SAP Mobile Secure Rapid Deployment Solution Version 2, September 2014 Customer

2. SAP Mobile Secure rapid-deployment solutionContents • Solution at a glance • Solution in detail • Mobile Device and App Management – Afaria • Analytics for Mobile Device & App Management – SAP Lumira™ Content • Mobile App Security – SAP Mobile App Protection by Mocana • Mobile Content Management – SAP Mobile Documents Package deployment Software products and system landscape

3. At-a-Glance: SAP Mobile Secure rapid-deployment solution Learn more • Consumer-grade mobile experience with compliant, multi-layered enterprise-grade security in 3 weeks!

4. Overview

5. Live in 3 Weeks with Mobile Enterprise Management on Premise • Employees need to access corporate email, calendar, files and enterprise apps on mobile devices • Temp workers, contractors, suppliers, and customers may need apps with secure and compliant access to selected corporate data • Prerequisite for productivity gains from a mobile workforce is broad user adoption, which requires consumer-grade user experience while enforcing enterprise-grade security • Scaling enterprise-grade, secure mobility to employees and ecosystem at constant or decreasing costs • Deploying and operating EMM reliably at predictable, low costs • Secure, multi-layered protection of mobile device and app connections to corporate network, email, office functions, and digital content • Remote device monitoring, managing, and remediation • Regulation-compliant, self-enforcing security and privacy policies • User self-services to enroll and manage devices • Prescriptive guides with best practices to install and run the entire Mobile Secure portfolio • Consultants of SAP and its ecosystem trained and qualified to implement the software and provide for knowledge transfer to IT team

6. Business scope SAP Mobile Secure rapid-deployment solution Device Mobile Device Management Application Mobile Application Management Mobile App Security Content Mobile Content Management Analytics for Mobile Device and App Management Enterprise Mobility Management System On-Premise Hybrid

7. Benefits for you • Defined scope and rapid deployment methodology reduce your deployment and investment risk • Thorough tests ensure your solution is properly installed and configured • Proven best practices reduce your cost of operations • Extensive knowledge transfer enables you to thoroughly monitor compliance and to implement sound yet unobtrusive security policies to delight mobile users • Your corporate network and data remain protected while your user base can scale and become more productive • Deployment project in time and in budget • Reduced project times compared to conventional project methods free budget • Auditable compliance of mobilized enterprise • Productivity gains through mobilized staff, and ecosystem • Scalable to hundred thousands of mobile users for Afaria and SAP Mobile Documents • Self-enforcing policies on apps wrapped with Mobile App Protection scale theoretically limitless

8. Solution in Detail

9. Mobile Device and App Management - AfariaScope and benefits For deployments to go live* on premise the package content includes: • Requirements Checklist - outlines all the technical and organizational prerequisites that need to be addressed before deploying Afaria • System Setup - provides step-by-step guidance on how to install and configure the Afaria platform components • Business Process Configuration and Test - describes the configuration steps for the device management lifecycle such as Device Provisioning, Device Configuration, Application Onboarding, Asset Tracking, Operation and Monitoring, to Decommissioning of Devices. Validates with prepared test scenarios that the Afaria system is working correctly. Benefits • Reduces overall deployment and investment risk • Ensures that solution is properly installed and configured • Enables customers to focus on operations instead of installation • Provides for operational best practices • Enables end-users to enroll and manage their devices *) Trials for evaluation available at sapmobilesecure.com

10. Mobile Device and App Management - AfariaIn the system • Afaria manages mobile devices throughout their lifecycle in the enterprise and apps that run on them • Install and configure Afaria platform • Onboard and secure mobile devices - corporate furnished or employee-provisioned (BYOD) • Monitor and enforce device and app compliance • Block, wipe and decommission devices

11. Analytics for Mobile Device and App Management – Lumira ContentScope and benefits With Lumira's powerful visualizations in real time IT administrators gain valuable insights about managed devices and their compliance for immediate response. Analytics for Mobile Device and App Management targets Afaria customers who have invested in SAP Analytics infrastructure and wish to leverage the pre-configured reporting content of this RDS. Package content: • Configuration Guide - provides instructions to import pre-configured reporting content into Lumira • Process Diagram and Test Script - contain procedures to share reports securely in the cloud for consumption on any device; analyze device compliance with selected pre-configured reports. • Leverages your prior investments in SAP Lumira Server and SAP HANA, or Lumira Cloud, or SAP BusinessObjects BI Server • Instantly visualizes compliance violations with pre-configured reports that fit any device • Expands your mobile analytics use cases to Afaria device and application management

12. Analytics for Mobile Device and App Management – Lumira ContentIn the system • Lumira visualizes compliance and business data of mobile devices managed with Afaria throughout their lifecycle in the enterprise and of the apps that run on them • Configure Lumira Server for Afaria reporting • Import pre-configured reports • Share reports with selected users • Analyze compliance of devices on any device

13. Mobile App Security – SAP Mobile App Protection by MocanaScope and benefits IT administrators can safely extend the reach of their organization's mobile apps to users beyond the enterprise, like contractors, suppliers, temp workers, or consumers. Package content : • Configuration Guide - provides instructions to install and configure SAP Mobile App Protection by Mocana on premise, as well as app-protecting policies • Process Diagram and Test Script - contain procedures to upload apps, wrap apps with security policies, and distribute apps. • Wraps 14 comprehensive access and data security policies into native and web apps on iOS and Android mobile applications • App-based security in seconds • Accelerates deployments by separating app security from application development • Secure Mobile Web Browser with single sign-on capabilities • Adds layers of security to internal enterprise apps where regulations like HIPAA or corporate policies require specific means of protection, e.g. encryption of data at rest and in transit for compliance with FIPS 140-2, app-specific passcodes, EULA and time frame for app use, e.g. for temp workers *) Trial for evaluation available at sapmobilesecure.com

14. Mobile App Security – SAP Mobile App Protection by MocanaIn the system • Mobile App Protection configures and applies security policies for mobile apps on devices managed by MDM like Afaria, for additional layers of protection, or on unmanaged devices, to enforce similar policies. • Wrapped apps can be deployed with MDM or Mocana catalog • Setting up Mobile App Protection • Using the MAP console • Applying MAP policies and uploading apps • Deploying Apps with Mocana App Catalog • Deploying Apps with MDM like Afaria

15. Mobile Content Management – SAP Mobile DocumentsScope and benefits With SAP Mobile Documents business users can securely share files, view documents, and present and collaborate on corporate content.   Package content: • Configuration Guide - provides instructions to install and configure the SAP Mobile Documents add-on for SAP NetWeaverJava on premise, including roles, destinations, and repositories for user content, corporate content, and shared content • Process Diagram and Test Script - contain procedures to onboard users, access content, and securely share content. • Allows users to securely access and share enterprise content online, and on the go, or access offline from any device • Integrates with open industry standard CMIS supporting content and knowledge management systems, such as SAP Knowledge Management, Microsoft SharePoint, OpenText, Alfresco, IBM • Leverages prior investments in SAP NetWeaver Portal, and CMIS-standard supporting CMS • Reduces business risks, ensures compliance, and increases employee productivity • Ensures that solution is properly installed and configured

16. Mobile Content Management – SAP Mobile DocumentsIn the system • Mobile Documents empowers users to access their business content on any device, and securely share it with collaborators within the enterprise and with business partners IT Admin • Onboard users on various device platforms User • Access corporate content • Share content securely

17. Package Deployment

18. SAP Mobile Secure rapid-deployment solution – Service Scope • Kickoff workshop to • define requirements, • set up the project, • establish expectations • Knowledge transfer • Go live support Rapid Deployment Solutions Software Content Service Enablement

19. Service scopeKey deliverables • Installation check • Support for Customer Selection of Options • Activation of Solution and Options • Confirm Activation • Key User Training • Assistance for Testing • Assistance for Switch to Production • Assistance for Go Live Support • Provide the IT infrastructure (servers) • Install SAP Business Objects (if needed) • Install the SAP NetWeaver Portal (if needed) • Provide fixed contact people in the business and IT departments • Document Customer Options • Attend Key User Training • Provide Technology support • Execute User Acceptance Testing • Conduct end-user training • Switch Solution to Production • Go Live Support

20. Integration points in scope

21. Service scope options The four service scope options are optional to one another. Within service scope option 2-4, “all or nothing” applies

22. Software Products and System Landscape

23. Which software is used? 1/2

24. Which software is used? 2/2

25. System Landscape – Afaria On Premise Standalone Apple APNS Ports 2195, 2196 Google GCM Ports 5228-5230 • Apple APNS • Google GCN • TinyURL • Google URL Shortener TinyURL; Google URL Shortener Relay Server RSOE80, 81,443 Microsoft CA Server 80,443 Afaria Server and subcomponents Firewall, Reverse Proxy Database 80,443 EUSSP Private DMZ Internet

26. System Landscape – Afaria On Premise Server Farm, HA Apple APNS Ports 2195, 2196 Google GCM Ports 5228-5230 • Apple APNS • Google GCN • TinyURL • Google URL Shortener TinyURL; Google URL Shortener Load Balancer Relay Servers Afaria Master Server and Subcomponents RSOE80, 81, 443 80,443 80,443 Microsoft CA Server Database(MSCS) RSOE80, 81,443 Afaria Replication Server and Subcomponents 80,443 Load Balancer or Reverse Proxy (recommended for High Availability) EUSSP Servers Private DMZ Internet

27. Afaria with Lumira (deployment options, simplified view) XOR Publish reports Import query from Afaria‘s SQL DB manually SAP Business Objects BI Server Lumira Desktop XOR Automatically update SAP HANA DB from Afaria‘s SQL DB XOR Lumira Cloud Lumira Server RSOE80, 81,443 Microsoft CA Server 80,443 Afaria Server and subcomponents Relay Server Firewall, Reverse Proxy Database 80,443 EUSSP Private DMZ Internet

28. System Landscape – SAP Mobile Documents SAP NetWeaver Cloud Server SAP NetWeaver Cloud (optional for shared documents) Firewall, Reverse Proxy <SAP NetWeaver Portal Port> SAP Mobile Documents Server Backend Servers (SAP Knowledge Management, Microsoft SharePoint, other CMIS CMS Private DMZ Internet

29. System Landscape – SAP Mobile App Protection by Mocana Reverse Proxy, Firewall SAP MAP Server and subcomponents 80,443 Note: Only if application is distributed via SAP MAP Server otherwise no external inbound connection is required to SAP MAP Server iOS Signing Server (for iOS application wrapping Private DMZ Internet