The WorkSpace and using Symantec Sealed apps with Mobility Suite
Last Updated November 09, 2015
Symantec Mobility: Suite 4.3 and later supports Symantec Sealed technology. Symantec Sealed is used by app developers to add security controls to apps that run on the devices managed by Mobility Suite. App developers integrate the Symantec Sealed technology into their apps as part of their development process (referred to as "sealing" the app). The Mobility Suite WorkSpace is a key part of the Symantec Sealed functionality.
Symantec Mobility: Suite provides a WorkSpace to realize the benefits of the Symantec Sealed technology. Sealed apps running in the WorkSpace can be configured to interoperate only with other apps in the WorkSpace. Depending on the app and assigned app policies, certain actions can be restricted to apps that only run in the WorkSpace. For example; you can restrict web browsing to a browser that only runs in a WorkSpace. Sealed Apps running in a WorkSpace can also be configured to restrict data sharing to only those apps in the WorkSpace. The combination of the Symantec Mobility: Suite WorkSpace and Symantec Sealed technology also brings workspace functionality to devices that do not natively provide secure workspaces.
The WorkSpace policy
Any apps that run in the WorkSpace that are not already managed by their own app policy, are managed by a default WorkSpace policy. The WorkSpace policy is a type of app policy and can be edited the same way you edit any other app policy. You can also create a new app policy specific to the WorkSpace, or assign an existing app policy if you have one already that meets your criteria.
You select the default WorkSpace policy on the Apps > App list > WorkSpace Settings UI:
The Default Policy drop-down menu lists your app policies. Use this panel to also choose your options to have Mobility Suite automatically include Symantec Sealed apps, and to be notified as new apps with Symantec Sealed technology are made publically available.
How the WorkSpace Policy interacts with App Policies
The WorkSpace Policy is applied to a Symantec Sealed app when a specific app policy has not been applied. However, if an app policy is assigned to an app, the App Policy overrides the WorkSpace Policy. Additionally, in the case of Symantec Sealed apps, and depending on the options chosen by the app developer during the sealing process, recommended policy settings may be provided in the Symantec Sealed app.
Using Sealed App recommended settings
Apps incorporating Symantec Sealed technology may also provide recommended app policy settings. You select the option to use Sealed App recommended policy settings from in the app details UI (Apps > App list > Add App, or Apps > App list > [selected app] > Edit). The recommended policy settings are listed under the policy selector drop-down menu. While you do not have to use the recommended settings and can provide your own settings in a separate app policy, it is highly recommended to use the recommended setting. In some cases, an app will not work correctly without the recommended policy settings.