Despite some security-conscious enterprise experts pointing accusatory fingers at the rather bleak encryption story and only-recently fixed ActiveSync policy compliance on the iPhone platform, there's no doubt that IT and network professionals are grooving on the iPhone -- there are many apps designed for administrators to take control of their operations with a touch of a finger, and now Cisco has stepped in with an informational and alert resource that fits in your pocket.

The Cisco SIO (Security Intelligence Operations) to Go free app [iTunes link], requiring iPhone OS 3.0 or later, lets the paranoid properly alert and aware security professional keep tabs on the global threat landscape with Cisco's Cyber Risk Reports, Threat Outbreaks and Mitigation Bulletins, along with podcasts, blog posts and a slew of other branded content. There's also an IronPort-driven IP and email domain scanner, which will grab WHOIS data along with a brief reputation score for your hosts.

Having all this Cisco goodness in one place is handy, although the majority of the app's headlines link to pages on the Cisco site that remain largely iPhone-unfriendly -- even the press release announcing the app's launch is hard to zoom properly -- and there's none of the flexibility of a full-featured RSS reader to forward articles, bookmark or set read/unread points.

Still, as a gesture of goodwill towards the intersection of iPhone users and security professionals, it's a reasonable step. Cisco also has the WebEx Meetings app [iTunes link] and the Cisco Mobile telephony tool [iTunes link] in the store, both free.

[via TechCrunch]

With the latest jailbreaking code, blacksn0w, now available for Geohot's blackra1n utility, iPhone owners who want to free their favorite smartphone from the constraints of the App Store and the AT&T network may do so. But a recent report by PCWorld / Network World indicates that Apple is hiring a new "sheriff" to lock up the iPhone platform for good. Is this true? Maybe not.

According to the post by Network World blogger John Cox, an Apple corporate website is showing a job posting for an iPhone platform security manager. The manager would lead a team aimed at creating methods for secure booting and installation of the iPhone OS, strengthening the platform's cryptographic services, partitioning and hardening internal security domains, and providing risk analysis of security threats.

The post goes on to breathlessly state that this job posting (which is noted as filling an existing position, not creating a new one) is indicative of Apple's concern that enterprise users might jailbreak and unlock their iPhones. The jailbroken phones would let enterprise users load apps that could "threaten corporate data or back-end Exchange servers," and "unlocking the phone... makes it hard to track, monitor and optimize wireless costs and could open the enterprise to legal problems."

Why is it so important for Apple to crack down on jailbreaking and unlocking? Well, the post says that many enterprises are adopting the iPhone "despite the fact that Apple provides virtually no security or management infrastructure..." That last statement is a bit ridiculous, considering that Apple even provides a series of white papers on exactly how to implement secure, managed iPhone deployments in enterprises.

Perhaps the author has been out the enterprise world for a while, since alterations like jailbreaking and unlocking are forbidden by policy in almost all big businesses that provide their employees with phones. As Mike Rose put it succinctly, "What enterprise user is jailbreaking their phone to use T-Mobile when that means they won't get reimbursed for their cell costs? What enterprise user wants to risk getting cut off from Exchange access?" And what enterprise employee is going to risk his or her good graces with the corporate security team for the sake of being able to run SplatCam or Cycorder on the iPhone?

The post tries to tie the rather innocuous task of filling an open job posting to an attempt by Apple to try to shut off the jailbreak world -- which, if it is doing, isn't necessarily about covering corporate requirements. As long as there are people who want to jailbreak their phones or unlock and move them to a different GSM carrier, hackers will find a way to do it. To us, it appears that Apple is just trying to maintain and improve security for the iPhone platform, something that will benefit all iPhone owners.

Deutsche Bank analyst Chris Whitmore says corporate IT is warming up to the iPhone. In a research note published yesterday das analyst says, "There is growing evidence that the iPhone is making inroads into the Enterprise."

Whitmore thinks Apple will sell 2 million iPhones to big business by the end of the year, some through reimbursements to employees and some through IT department purchases. If those numbers hold, the iPhone will own about 7% of the Enterprise smartphone market in 2009, up from the 2% it controlled in 2008.

What's up with the shift? Whitmore notes four reasons:

• User satisfaction - highlighted by the recent J.D. Power surveys of both consumer and business smartphone users
• Enterprise applications
• The iPhone's level of innovation
• The virtual keyboard - according to Whitmore, the thought that business users have to have a physical keyboard on a smartphone has turned out to be a 'fallacy.'

However, businesspeople might not agree that they don't need a physical keyboard if their first virtual keyboard isn't on an iPhone. UK researcher Canalys has taken a look at touchscreens and future smartphone purchases. The firm finds the ground shifting the touchscreen's way. Of the 3,000 survey respondents in the UK, Germany, and France, 38% say their next phone will have a finger-oriented touchscreen, while 16% say theirs will have a stylus-operated touchscreen.

But a lot of people who have virtual keyboard-only phones miss the physical keys. According to Canalys, 53% of people who own a touchscreen phone say they won't buy another one, though they may have bought the wrong one for them to start. A majority of iPhone and HTC users say they'll keep the virtual keys on their next phones, while less than a third of Sony Ericsson touchscreen phone owners say their next phone won't have buttons.

[via Fortune, The Register]

Apple has released version 3.3 of its remote administration tool, Apple Remote Desktop (ARD). The update is available both via Software Update, and from the Apple website.

According to the release notes, the update comes with a number of improvements, including the long-desired ability to send function keys and system shortcuts (Force Quit, cmd-Tab for application switching, cmd-shift-Q to log out) to the remote Mac; previously those commands would execute on the administrator's machine, which could cause undesired behavior. Also included are support for wide-area Bonjour connections and improved performance when using a shared screen.

If you're just starting out with ARD, be sure to check out some of the great tutorials Apple has posted online. From getting set up, to providing remote assistance to users, to automating routine tasks; as Apple might say, "there's a tutorial for that."

Thanks to TUAW reader Jim for giving us the heads up!

EMC announced today an update to its popular Retrospect network backup software; version 8.1 brings back support for PowerPC-based workstations and improves performance for Intel-based Macs.

Eric Ullman, director of project management for Retrospect, said that while older G4-based Macs will run significantly slower than their Intel-based counterparts, Retrospect 8.1 can at least back them up (a capability that was lost in the move from the legacy 6.1 version). G5s with multiple processors, however, can see performance gains of 10 to 15 percent compared to Retrospect 6.1.

Intel-based workstations will also see performance increases of 10 to 15 percent compared to 8.0, and 30 to 35 percent compared to Retrospect 6.1. Other improvements, including updates to the user interface based on feedback from early adopters, are also included in the update.

Ullman said that with Retrospect 8, EMC had "recommitted itself to the Mac market" and this update was the second part of a three-phase deployment of the completely-rebuilt Retrospect 8. Phase one was the initial release, supporting Intel processors; phase two now supports PowerPC processors. Phase three, according to Ullman, is slated for release "in the Snow Leopard timeframe," and is expected to include support for importing Retrospect 6.1 sets and configurations, among other improvements to performance and the client software.

As Steve Sande mentioned, Retrospect's update comes on the heels of BRU Server 2.0, which added a new user interface and performance improvements. Ullman noted that BRU Server and Retrospect are fundamentally different, with Retrospect scanning more closely to prevent file duplication and save time copying files. Retrospect is generally less expensive than BRU Server, though their pricing structures and trim levels are a little different.

The update is available now on the Retrospect website. It's free for Retrospect 8 users and Retrospect 6.1 users who purchased the product after January 14, 2008. For new users, Retrospect 8 comes in a variety of flavors ranging in price from $129 to $1,669, depending on the size of the network.

Citrix, the folks who provide a popular way to run applications on remote servers using a thin client, have announced the immediate availability of Citrix Receiver for iPhone (click opens iTunes). We saw the Citrix guys running around the show floor at Macworld Expo this year, surreptitiously demoing an early build of this app to anyone who walked within range.

Receiver is a free app that enables iPhone and iPod touch users to run any Windows application as a service on their device. Connecting to a Citrix XenApp environment, iPhone fans can securely work with apps from Oracle, SAP, McKesson, Cerner, and other vendors. The only information sent over the wireless connection consists of screen taps and gestures, keyboard input, and screen updates, so it is simple to keep data secure.

Receiver for iPhone uses Citrix HDX to deliver high-definition content to the device so that Flash and Silverlight content can be viewed as well. Flash on an iPhone -- now there's an idea!

In enterprises such as hospitals that depend heavily on Citrix already, Receiver is going to be "well received." This should help Apple's iPhone sales efforts in the enterprise market really take off.

MacRumors is calling attention to a PC World report: new Nehalem-based Xserve models are expected soon, based on a slipup on Apple's Hong Kong site (gotta watch those ALT tags, folks!). The replacement units for Apple's Harpertown and Penryn Xeon-based rackmount gear should be able to leverage the new chip architecture and power management features to supercharge parallel operations in the Snow Leopard version of Mac OS X Server.

If you're in the market for Xserves, would you buy now for a known quantity or wait for the latest and greatest? Let us know below.

Go on, I dare you -- name an individual who has done more to improve the lot of Mac OS X system administrators than Mr. Mike Bombich. Over the course of the past six years, while working both at educational institutions and as an Apple SE, Mike has given of his time and energy in an effort to deliver some deeply useful tools: Carbon Copy Cloner, BootPicker, NetRestore and more. CCC was one of the first effective & free drive cloning tools for Mac OS X; NetRestore set the standard for deployment frameworks and led the way in Boot Camp compatibility for restoring Windows partitions on the Mac.

CCC continues on, but we have to say goodbye to the other half of the dynamic duo: Mike announced that he has end-of-life'd the NetRestore utility, citing a lack of time for the necessary work to bring it forward to current standards and future functionality. It's true that the basic capabilities of NetRestore have been replicated elsewhere (particularly Winclone for Boot Camp partitions, and Apple's NetBoot services in Leopard Server for machine imaging over the LAN), but many have built very capable and complex deployment strategies on top of NetRestore's PHP and database support. It's a shame to see it go.

If you're shedding a tear at the departure of NetRestore, you might take Mike's advice and give DeployStudio a look -- many of the deployment approaches he had planned for "NetRestore 4" can be found in that free and actively-developed system. DeployStudio will allow you to image machines from a local boot drive or from a NetBoot repository; you can even create an image server for your Windows machines and wipe them remotely. Another option, and one that permits very rapid customization of your image config, is the InstaDMG project.

For the latest help and tips on deployment strategies, be sure to visit afp548.com and macenterprise.org.

Thanks to Josh Z for the tip.

Managing the power consumption of your Macs just got a little easier with the latest version of the LANrev cross-platform client management tool. In the new 5.0 build, the headline feature is bright green: you can assign power saving preferences to machines, including toggles based on whether a user is logged in and new reporting fields to monitor energy savings. For government users, the new FDCC SCAP component helps Windows clients meet Federal Desktop Core Configuration standards for 300-odd security settings on XP and Vista (yee-ikes).

LANrev's sometimes-confusing UI has been simplified, bringing many of the server-oriented functions (software distribution, license monitoring, etc.) under a single window; machines can now be categorized for ease of searching and organization. Software deployment has been jazzed up with new metapackage/multi-payload options and Adobe Creative Suite CS3 direct deployment for installers and updaters (no word yet on CS4 support). LANrev still offers one-click Mac reimaging without setting up a Netboot server, which is a big plus in large deployments.

Pricing for LANrev starts at about $50 per seat for corporate buyers ($40 for education markets) with tiered discounts for larger installations.

For individual Mac users or small businesses, it's usually not a problem deploying new Macs with a standard image -- as a Mac support specialist, you might just load each machine manually. But imagine if you need to deploy hundreds or thousands of Macs, PCs, or XServes. You'd need a small army of techs or a way to do the job automatically.

That's where DeployStudio comes in handy. This freeware tool can be used to create deployment files using Netboot, external USB or FireWire drives, or any AFP, SMB, or NFS sharepoint on the network.

DeployStudio works with Mac OS X 10.4.11 to 10.5.3 at this point, and is updated regularly to include new OS versions. The package consists of DeployStudio Server, DeployStudio Assistant, DeployStudio Admin, and diffPackageMaker.

DeployStudio Server creates a network based deployment server containing the images. Assistant is used to configure the server and to create the NetInstall sets, while Admin is used to monitor deployments, manage disk images and scripts, enter configurations, and more. diffPackageMaker can look at the difference between two file system snapshots and create installation packages based on what has been changed or added.

Detailed documentation PDFs and screencasts are available on the DeployStudio site.

Back in January, we reported that IBM had plans to bring the Lotus Notes groupware application to the iPhone platform. Well, it's happened!

Big Blue is announcing the availability of iNotes Ultralite, an iPhone portal to Lotus Notes that is available for free for anyone with a Lotus Notes license. In case you're wondering, there are currently about 140 million people worldwide who use Notes for their email, calendaring, and contacts.

IBM is always concerned about data security for its customers, and as such they decided to make iNotes Ultralite a web app rather than a native iPhone application. IBM felt it was important to customers to insure that all communications between the iPhone and Lotus Domino server be encrypted, and that no data remain on the device in case it was lost or stolen.

iNotes Ulitralite provides yet another foothold in the enterprise market for Apple.

[Via New York Times Technology blog]

Keeping up with the Leopard-centric changes to managed preferences and mobile accounts is crucial if you're responsible for a labful or campus-ful of Macs, and you want to gracefully control what permissions or resources your wanton users have when they log in. One great resource for Mac admins diving into MCX (managed clients for OS X) for the first (or hundredth) time is Apple engineer John DeTroye's Tips & Tricks documentation.

We mentioned John's Tiger edition of the T&T docs last year, and now that he's updated the handbook for Mac OS X 10.5 and Server 10.5, you'll want to bring your library up to date. Gone is most of the material specific to machine imaging techniques (I strongly recommend NetInstall [PDF], which is working better under Leopard than it ever did before), making room for more discussion of MCX settings and portable home directories. Download your free copy of the T&T file today and it'll make your life easier tomorrow.

Apple just released two updates for its Remote Desktop product. The client update and the admin update promise the following fixes:

• Improved reliability with the Copy Items command.
• Upgrade Client Software command now uses unicast packets for improved reliability on some networks.
  
• Fixes to the Force Quit All Applications and Copy Items to Computer Automator actions.

The update is available to Mac OS X systems running 10.3.9 (or later) and ARD 3.x. You can download the updates by opening Software Update (Apple menu > Software Update) or by visiting Apple's downloads website and downloading the installer packages.


Thanks to everyone who sent this in!

With Mac OS X 10.5.5 on the update list for the day, Apple has also decided to release a number of shiny, happy updates for the Mac OS X Server geeks among us. At the top are two versions of Mac OS X 10.5.5:

• Mac OS X Server 10.5.5 (341 MBs)
• Mac OS X Server 10.5.5 Combo Updater (729 MBs)

If you don't wish to update to 10.5 yet, don't worry about it, you can still apply the Security Update 2008-006 that is included in the OS X 10.5.5 server update. This update, available for PPC & Intel Servers running Mac OS X 10.4, weighs in at 118 MBs.

Once you are done with those wonderful happy not so fun system updates and reboots, why not give the "WebObjects Update 5.4.3 for Mac OS X 10.5 " update a whirl?

And there you have it, all the Enterprise updates from Apple today! We know what all the IT people around the country will be doing tomorrow. Rebooting at least once.


Thanks to everyone who sent this in!

Ben Gray, analyst at Forrester Research, says that Mac OS X accounts for 4.5 percent of the business operating system market, 3¾ times their share in January 2007.

Computerworld notes that all this has happened with one thing notably absent: an enterprise strategy. "I haven't seen anything from Apple that seems to show it's attack[ing] the enterprise market," Gray said.

He says the gains in market share are due to two trends: client virtualization (using software like Parallels or VMWare) and the idea that corporate IT departments are more willing to support a broader range of hardware and software.

"In the end, [IT departments] want their employees to be as productive as humanly possible, so they'll approve tools that people are more comfortable with," said Gray.

In related news, Windows' overall share of the corporate market dipped slightly from 95.6 to 94.9 percent for the same time period.

[Via Macworld.]