Sophos Secure Workspace Version 5.0 for Android release notes

New in this release

Renaming of app name from Sophos Mobile Encryption to Sophos Secure Workspace

The app was renamed from Sophos Mobile Encryption to Sophos Secure Workspace to better reflect that Sophos Secure Workspace is the central, secured workspace for a user's documents. With the new feature "corporate documents" Sophos Secure Workspace includes one more additional feature specially supporting corporate environments, with much more features to follow in the next releases.

PDF editing and annotation

Sophos Secure Workspace now allows to annotate PDF and edit PDF forms within the application by using a built-in PDF editor. Sophos Secure Workspace integrates a PDFTron library. For an overview of the many PDF editing / annotation features now available for Sophos Secure Workspace please visit the following PDFTron site: https://www.pdftron.com/pdfnet/features.html.

UI-refresh

The UI of Sophos Secure Workspace was completely re-designed and now aligns to the new blue UI of all mobile apps.

Management of Sophos Secure Workspace by Sophos Mobile Control

Sophos Secure Workspace can now be managed via the Sophos Mobile Control server and then operates in a managed mode.
If Sophos Secure Workspace is in managed mode, the following changes will apply:
 * Settings are controlled by Sophos Mobile Control
 * Corporate documents feature can become available, depending on the Sophos Mobile Control server settings 
 * Cloud Storage Providers can be pre-configured (e.g. Egnyte or WebDav)
 * Sophos Secure Workspace contacts the Sophos Mobile Control server during every start and can receive commands

Please Note: This feature requires a device managed by a Sophos Mobile Control 5.0 server.

Corporate Documents Provider
When Sophos Secure Workspace is managed, a new feature on the Sophos Mobile Control 5.0 server - the corporate documents provider - allows to distribute corporate documents to a managed Sophos Secure Workspace. The corporate documents provider is a special provider shown in the list of storage providers. The admin uploads documents to the Sophos Mobile Control 5.0 server and defines certain access rules. The user then can browse and view that documents on his device. For details on this feature, please see the documentation of Sophos Mobile Control 5.0.

Please Note: This feature requires a device managed by a Sophos Mobile Control 5.0 or higher server and the Sophos Mobile Control client 5.0 or higher on the device.

Several smaller improvements
The new version of Sophos Secure Workspace includes several smaller improvements, e.g.:

 * The user can now encrypt plain files directly within the app (so called in-place encryption)
 * The user can now encrypt entire folders
 * The app now checks if a new version of the app is available on the store and reminds the user to update if so
 

System Requirements

Sophos Mobile Security runs on Android devices with an Android version 2.3.3 (API level 10) and higher.

Supported Storage Providers

Sophos Secure Workspace supports following storage providers:

Installation

Installation of the application must be done via Google Play.

Known Issues

Files cannot be opened by some third-party applications  

Files cannot be opened by some third-party applications due to problems with access permissions. For displaying the content of the file, access permissions are applied to the file so that it can be opened by the third-party application. Some third-party applications fail to work properly if they're not granted universal access to files and therefore cannot display the file. Applications known to have this problem are ASTRO Image Viewer or ES Image Browser. If this problem occurs, please use another application to view the file.

Going back when linking a Google Drive account may cause Google Play Services to crash

When the user links a Google Drive account in Sophos Secure Workspace, the application triggers the selection of an account in a Google application. Selecting "Add Account" on the first screen directs to the "Add a Google Account" screen. If the user then clicks the back button, the Google Play Services may crash (seen on a Nexus 7, with Android 4.2.1). This crash is caused by another Android application and not by Sophos Secure Workspace.

Viewing of favorites may show an outdated version of the file, e.g. using the Android Gallery App

Some applications used for viewing favorites of Sophos Secure Workspace do cache files internally and do not recognize when only the file content changes. E.g. the Android Gallery application caches all pictures it views. When only the content of the file changes, the Android Gallery App does not recognize the change when opened from Sophos Secure Workspace and displays the cached content. Only a change of the file name will cause the Gallery App to reload the file. Please use another application that does not show this behavior for viewing the favorite files or forcibly close the Gallery App before viewing updated content.

Update from Version 1.0 may result in unlinking of Dropbox and missing metadata for the favorites.

Updating from version 1.0 may unlink an already linked Dropbox account. Please link the account again and all favorites of the Dropbox will be visible again. It may also happen that the file metadata of favorites (size and sync date) cannot be retrieved and only default values are shown. After syncing the favorites again all metadata is restored. The favorites can still be opened, even with wrongly displayed metadata.

Update to new version may result in the status of Dropbox favorites not showed correctly

Updating to the new version occasionally may show already favorized Dropbox files as not favorized (star icon not filled). Clicking on the star icon results in a duplicate favorite created. The duplicate entry can be removed again by de-favorizing the duplicate again.

Microsoft OneDrive (former Skydrive) not working on certain devices.

The Live SDK for Android version (5.0) that is used for Sophos Secure Workspace to support OneDrive as storage provider is distributed by Microsoft as pre-release, time-sensitive unsupported software that may not operate correctly. Therefore it may happen that OneDrive is not working on certain devices, e.g. we could not logon on to OneDrive on a Motorola Defy+ with Android 2.3.4. 

Wrong display status of OneDrive files

In some cases a favorite OneDrive file is displayed with its OneDrive ID instead of its name. Browsing to the OneDrive folder containing the file will refresh the information and resolve this display issue. Furthermore, after copying multiple files in a OneDrive provider, it may happen that the file list view displays files twice. A refresh of the view shows the correct file list again.

Developer Option Don't Keep Activities causing problems when user-visible interaction is required with third party applications.

Sophos Secure Workspace relies on third party applications to support the different cloud storage providers. When requiring user-visible interaction with such third party applications (e.g. to logon to a cloud storage provider like Google Drive), having the developer option Don't Keep Activities activated may affect the normal lifecycle of Sophos Secure Workspace or even cause the crash of it . This is caused by the OS behavior activated with the Don't Keep Activities setting: Sophos Secure Workspace may be closed while a third party App is shown, whereas the third party application tries to start Sophos Secure Workspace resulting in an infinite loop. As recommended by Google, this developer setting should not be activated in normal use of a device.

WebDav Favorites with special characters or blanks in the filename are no more favorites after upgrading Sophos Secure Workspace from a previous version.

WebDav files that have special characters or a blank in the filename and that are also marked as favorite are no more favorites after upgrading Sophos Secure Workspace to the new version. The user has to manually mark these files as favorite again. This happens due to a necessary adjustment of the encoding of WebDav file names respectively WebDav requests that had to be done for the new Sophos Secure Workspace version to be able to implement the uploading of files to WebDav.

Egnyte Upload: User cancelling the upload of a file leaves a corrupt file on the server.

If the user cancels an update of a file to Egnyte, a corrupt file remains on the Egnyte server. This is a problem of the Egnyte API and will be fixed by Egnyte.

File size limitations for viewing and editing text files.

Due to limitations of the third party library used for viewing and editing text files, content of plain text files might be truncated if the file size is bigger than ~ 3MB. Furthermore, plain text files can only be edited when the file size is smaller than 50 KB.

Dynamic GIF files are not shown correctly due to limitations of the 3rd party viewer library used

Dynamic GIFs are not shown correctly. Only the first frame is shown as a static image.

Limited Functionality when manipulating items in the file list on Android Honeycomb tablets (Android 3.0-3.2).

Due to a bug in a third party library, the contextual action mode (also called multi-select list mode) is not available on Android Honeycomb tablets (Android 3.0-3.2). Therefore, it is not possible to manipulate (rename, delete,…) files or folders in the file list on these devices.

Gmail 4.x ignores files when shared from Sophos Secure Workspace

Gmail 4.x does not allow to receive files shared by Sophos Secure Workspace as it only accepts received from /mnt/sdcard. All other Gmail versions work fine, especially the new versions of Gmail 5.x.

In-Place Encryption not working for Android 2.3 devices

Due to a bug in android 2.3 inplace-encryption and sharing is disabled on these devices.

Technical support

You can find technical support for Sophos products in any of these ways:

Legal notices

Copyright © 2015 Sophos Ltd. All rights reserved.

No part of this publication may be reproduced, stored in a retrieval system, or transmitted, in any form or by any means, electronic, mechanical, photocopying, recording or otherwise unless you are either a valid licensee where the documentation can be reproduced in accordance with the license terms or you otherwise have the prior permission in writing of the copyright owner.

Sophos is a registered trademark of Sophos Ltd. All other product and company names mentioned are trademarks or registered trademarks of their respective owners.