Sophos Mobile Control 3.0 release notes

System requirements

Sophos Mobile Control platforms

Supported platforms	Detailed version
Operation system	Version
Windows Server 2003 32 bit	SP 2
Windows Server 2008 32/64 bit	SP 1
Windows Server 2008 R2 64 bit	SP 1
Windows Server 2012 64 bit
Java JDK version	Version
JDK 1.6	6u38 or higher
JDK 7	7u11 or higher
Database version	Version
Microsoft SQL Server	2008 (32/64 bit) 2008 R2 (64 bit) 2012 (64 bit) 2012 Express (32/64 bit)
MySQL Server	5.5
Mobile operation system	Version
Apple iOS	4.0 or higher 5.0 or higher 6.0 or higher
Android	2.2 or higher 3.0 or higher 4.0 or higher
Windows Mobile Professional	6.1, 6.5
RIM Blackberry Integration	BlackBerry Enterprise Server 5.0.3 or higher
Browser	Version
Internet Explorer	8 or higher
Mozilla Firefox	8 or higher
Google Chrome	15 or higher
Directory servers	Version
Microsoft ActiveDirectory	As included in the Windows Server versions above.
Novell eDirectory	8.8 SP 6
Lotus Domino	8.5.3
Email systems	Version
Microsoft Exchange	2003 SP2 2007 SP3 2010 SP2
Lotus Domino Traveler	8.5
Zimbra	8.0
CA Server	Version
Win Server 2008 (32/64 bit)	As included in the Windows Server versions above.
Win Server 2008 R2 (64 bit)	As included in the Windows Server versions above.
Win Server 2012 (64 bit)	As included in the Windows Server versions above.

Note: For Android versions up to version 4.0.4 Google accounts have to be available on devices, if you want to set up Sophos Mobile Control on devices without telephone numbers (for example tablets). The accounts are required for using GCM (Google Cloud Messaging). For Android version 4.0.4 and 4.1 and higher Google accounts are no longer required.

Note: Android 4.2 devices are supported. New features in Android 4.2 are not supported. If the 4.2 multi user feature is used on a device, only the first user that is registered in Sophos Mobile Control can be managed.

Samsung SAFE API V2

Samsung SAFE API V2 has been tested and is supported with the following devices:

· Samsung Galaxy S3

· Samsung Galaxy S3 Mini

· Samsung Galaxy S2 as of Android 4.0.4

· Samsung Galaxy Note

· Samsung Galaxy Note 2

· Samsung Galaxy Note 10.1

Installation

For details on installing the Sophos Mobile Control Server, refer to the Sophos Mobile Control installation guide. For details on initial configuration, refer to the Sophos Mobile Control startup guide. For details on installing and setting up Sophos Mobile Control on end user devices by using the Sophos Mobile Control Self Service Portal, refer to the Sophos Mobile Control user guides for Android, Apple iOS and Windows Mobile. You can download the product documentation at http://www.sophos.com/en-us/support/documentation.aspx.

Known issues

Setup

Sophos Mobile Control license in a folder with Japanese characters in the folder name (DEF85338)

If the Sophos Mobile Control license file is placed in a folder with Japanese characters in the name for installation, the installation process fails.

End user device

SMC Mobile client on Windows Mobile devices with Cyrillic character set

The SMC Mobile client does not work on Windows Mobile devices with a Cyrillic character set.

Sophos Mobile Control Server

Sophos Mobile Control 2.5 Android client cannot be registered on version 3.0 server (DEF86690)

After updating the Sophos Mobile Control Server to version 3.0 a Sophos Mobile Control 2.5 client cannot be registered on the server any more. If you download the client from the server, you have to upload the latest client package to this server to be able to register an Android client.

Samsung SAFE API - Galaxy S3: Device reboots in a loop when camera is turned off (DEF86658)

If you deactivate the camera on a Galaxy S3 device by policy and face unlock is used on the Android device or the Samsung Smart Stay functionality is in use, the device reboots after a while. After the user has entered the PIN on the device, it reboots in a loop.

Sophos Mobile Control web console

Exception on empty tables

If you click the >> button on an empty table, a “div by zero” exception occurs.

Device reports

If you create a device report as a Multi Tenancy Admin user, the insert date is included, but it is not shown in the column definition (header).

Synchronizing an Android device with an Exchange Server

Android devices are automatically enabled through EAS Proxy, if the device was registered with the Self Service Portal. If an administrator has added the phone to Sophos Mobile Control, it is required to enter the sAMAccountName in the respective property of the device details view to make ActiveSync synchronization possible. If devices are registered with an LDAP entry and SSP, this is not necessary (this only applies to Microsoft ActiveDirectory).

State “Exported” shown for uninstalled client (DEF71889)

After uninstalling a client by using Applications > Uninstall the state Exported is shown in the Task view for the uninstallation task. The client has been uninstalled, but the task state is not updated.

MDM Agent property keeps value 1 after uninstallation (DEF72393)

When a new device is created, the MDM Agent property shows 0 under Value on the Device page. When the SMC client is installed, the value changes to 1. After uninstalling the client by using Applications > Uninstall, the MDM Agent property still shows the value 1.

Command KillProcess in command bundles for Windows Mobile devices (DEF76577)

The command KillProcess for Windows Mobile devices is always shown to be finished successfully, even if the relevant process is still running after the command has been applied.

Select package page does not show existing packages for Windows Mobile (DEF76672)

When creating a new task bundle for Windows Mobile devices the Select package page for the type WinMobileProfileTransfer does not show any packages

Personal settings display error (DEF76713)

If you change the setting Data sets per table in the Personal tab of the Settings page in Internet Explorer 8, a display error occurs.

Filter in task view is closed after refresh interval (DEF76721)

When you click the blue magnifier icon in Task view to filter the view, the filter is closed after the refresh interval.

Filter does not support Unicode characters in profile names (DEF76894)

Profiles with Unicode characters in their names are not found when you apply a filter on the Profiles page.

Blocking of email access (DEF76982)

If several Android devices are registered for the same user in the Self Service Portal and email access is blocked for one of the devices, access is blocked for another device, not for the one intended. This problem is caused by limitations in the Android operating system.

Removed software still visible in “Installed Software” tab (DEF83369)

If you remove the MDM profile from an iOS device in the Sophos Mobile Control administration web console, it is still shown for the relevant device under Devices in the Installed Software tab.

Managed/compliant status for a device is not updated after device wipe (DEF83156)

After you have sent a wipe command to a registered device, the device status icons for “Managed” and “Compliant” are not updated accordingly.

Apple VPP not supported in some countries

The Apple Volume Purchase Program is not supported in some countries, for example Austria. If you try to push an app with Austrian Apple Store access, the app cannot be installed. The Apple Volume Purchase Program is supported in the following countries: Australia, Canada, France, Germany, Italy, Japan, New Zealand, Spain, the United Kingdom and the United States.

Apps cannot be pushed to iPads with iOS 4.3.5.

If you try to push an app through the Sophos Mobile Control web console to iPads with iOS 4.3.5, an error message is displayed.

After activating a Sophos Mobile Security license as a super administrator you cannot add licenses to a customer directly (DEF86841)

After activating a Sophos Mobile Security license number as a super administrator, you have to log out from the web console and log in again to be able to add licenses to existing customers.

SSID field in iOS and Android configuration profiles is case sensitive

When you enter the ID of a wireless network in the SSID field of a Wifi configuration in an iOS or Android profile, you must use the correct case sensitive spelling.

iOS Wifi profiles used to fail (DEF88049)

The assignment of iOS Wifi profiles with security type settings “Any (Company)”, “Corporate WEP” and “Corporate WPA/WPA2” used to fail in version 3.0.0. This has been fixed in version 3.0.1. New profiles can now be assigned without any problems. To correct profiles created with version 3.0.0, open the profile in version 3.0.1, go to the Wifi configuration, apply it and save the profile.

Sophos Mobile Control Self Service Portal

Pressing Enter during device registration (DEF72876)

When you press Enter during device registration in the Self Service Portal (for example after entering a confirmation code), the previous page is displayed instead of the next one.

Back button as default (DEF76840)

When navigating through the Self Service Portal pages the Back button is always the default

Technical support

You can find technical support for Sophos products in any of these ways:

§ Visit the SophosTalk community at http://community.sophos.com/ and search for other users who are experiencing the same problem.

§ Visit the Sophos support knowledgebase at http://www.sophos.com/en-us/support.aspx.

§ Download the product documentation at http://www.sophos.com/en-us/support/documentation.aspx.

§ Send an email to support@sophos.com, including your Sophos software version number(s), operating system(s) and patch level(s), and the text of any error messages.

Legal notices

No part of this publication may be reproduced, stored in a retrieval system, or transmitted, in any form or by any means, electronic, mechanical, photocopying, recording or otherwise unless you are either a valid licensee where the documentation can be reproduced in accordance with the license terms or you otherwise have the prior permission in writing of the copyright owner.

Sophos is a registered trademark of Sophos Ltd. All other product and company names mentioned are trademarks or registered trademarks of their respective owners.