Sophos Secure Workspace 7.1.0 for iOS release notes

[ New in this release ] [ System requirements ] [ Supported storage providers ] [ Installation ] [ Additional information ] [ Known issues ] [ Technical support ] [ Legal notices ]

New in this release

This release of Sophos Secure Workspace for Android includes the following changes:

System requirements

Sophos Secure Workspace runs on the following platforms:

Compatible devices have to run iOS 9 or higher.

Supported storage providers

Sophos Secure Workspace supports the following storage providers:

Installation

The app must be installed from the App Store.

Additional information

Sophos SafeGuard synchronization of BitLocker and FileVault recovery keys

Users can display BitLocker and FileVault recovery keys for up to 10 computers that are assigned to them in Sophos SafeGuard Enterprise version 8 or higher.

To enable this feature for your users, select the Recovery via mobile option in the SafeGuard Management Center as described below:

1.       In the Sophos Mobile Control web console, go to System setup > SGN.

2.       Use the link on the SGN tab to download the certificate file of the Sophos Mobile control server.

3.       In the SafeGuard Management Center, go to Tools > Configuration Package Tool.

4.       On the Servers tab of the Configuration Package Tool, click Add, select the certificate and click OK. Do not change the Server name field.

5.       Also on the Servers tab, select Recovery via mobile to enable the synchronization of BitLocker and FileVault recovery keys with Sophos Secure Workspace.

6.       On the Managed client packages tab, select Managed Client (Default) as Configuration Package Name, select your SGN server as Primary Server, and then click Create Configuration Package.

7.       Use the Upload a file button on the SGN tab of the Sophos Mobile Control web console to upload the created configuration package zip file.

Note: For security reasons, the recovery keys (together with the other keys from the SafeGuard keyring) are removed from the device when it violates the compliance rules that you have configured in Sophos Mobile Control.

For detailed information on corporate keyring synchronization, see the Sophos Mobile Control administrator help.

Known issues

Dropbox authentication

Once successfully linked to a Dropbox account, no more password input is required to get access to the files in the linked Dropbox. Even if the password for this Dropbox account is changed on another system or through the Dropbox web site, presenting this new password is not required on any of the linked systems nor do these systems have to be linked again. In case access to the Dropbox has to be withdrawn reliably (for example because a mobile device is lost), the device should be unlinked from the given Dropbox account through the Dropbox web site and thus be no longer allowed to access the data.

File sync

Files stored on the mobile device are updated automatically whenever modified in the cloud. Some file attributes like the file size and modification date are used to detect any changes. In case a previously encrypted file is encrypted using a different key, the file will not be synchronized to the client. This is because the content of the file remains unchanged, as well as the file's attributes, and therefore a sync is not triggered.

A crash may occur on an iOS tablet when the user views managed Sophos Secure Workspace in portrait mode and the Sophos Mobile Control admin denies network access

When the administrator is denying network access for a managed Sophos Secure Workspace app on an iOS tablet while the user is operating the app, the app may crash when it is used in portrait mode. Switching to landscape mode solves the problem.

Browsing corporate websites that require authentication with self signed certificates does not work on iOS 10.0 and 10.1

With iOS 10.0 and 10.1, the iOS UIWebView component used by the corporate browser has a known bug that does not allow the authentication with self signed certificates for corporate websites. In this case, the site cannot be browsed. The issue is fixed in iOS 10.2.

Updating to version 7.0 requires to mount Google Drive accounts again

Due to an update of the underlying Google Drive API, mounted Google Drive accounts do not appear as mounted after an update and need to be mounted new.

Secure Workspace supports only default compression in 7zip format

Due to technical limitations of the third-party library used for 7zip, only files with default compression are supported.

Technical support

You can find technical support for Sophos products in any of these ways:

Legal notices

Copyright © 2017 Sophos Limited. All rights reserved.

No part of this publication may be reproduced, stored in a retrieval system, or transmitted, in any form or by any means, electronic, mechanical, photocopying, recording or otherwise unless you are either a valid licensee where the documentation can be reproduced in accordance with the license terms or you otherwise have the prior permission in writing of the copyright owner.

Sophos is a registered trademark of Sophos Limited and Sophos Group. All other product and company names mentioned are trademarks or registered trademarks of their respective owners.