Ivanti Avalanche

In enterprises where mobile devices are used, effective mobile device management is a must. And just as the wireless ecosystem is growing, so is the number of mobile devices. Therefore, it is important for businesses to manage these devices efficiently and securely in an effort to achieve a lower total cost of ownership.

Ivanti Avalanche allows you to manage all enterprise mobile devices from a single management console. The system is not tied to a specific hardware manufacturer, but supports devices from all major brands. Ivanti's solution is used by 9 out of 10 global retail companies, and more than 15,000 companies and 6 million devices worldwide.

A big advantage of Avalanche is its integration with other Ivanti Wavelink products.

Wavelink Avalanche is currently offered in version 6, which can manage devices running legacy Windows CE and Windows Mobile (Windows Embedded Handheld) operating systems as well as Android OS.

Features of Ivanti Avalanche

Software and configuration management

Software distribution and version control

Avalanche saves time and money in device management. The mobile client, Avalanche Enabler, is already pre-installed on some manufacturers' mobile devices (Datalogic). The commissioning of remote management can thus be significantly automated - the mobile device can be automatically found by the Avalanche server and start installing the software. Avalanche supports working with profiles and groups, which allow to define a specific configuration for new devices that meet certain criteria. This eliminates the need to configure each new device specifically and manually.

Setting up out of the box units

With the Scan-to-Configure utility, initial configuration can be performed using secure configuration barcodes generated via the administration interface. In this way, both new devices and already managed devices that need to implement new settings can be configured. Scan-to-Configure thus contributes to a significant reduction in the time required to bring new devices into operation.

Use of profiles

Network settings and software are grouped into profiles that are applied to groups of devices according to definable criteria.

Mobile device administration via Wi-Fi network and mobile data

Avalanche provides support for mobile devices whether they are connected via a local Wi-Fi network or mobile data. Moving mobile devices between networks is also supported. A number of features are helpful for managing devices over mobile data: setting connection parameters to the carrier such as APN, setting time zone, user attributes, etc. For devices in sleep mode that support SMS reception, connectivity to the system (and thus possible updates) can be forced by sending an SMS. Avalanche also provides the option of persistent connectivity between the mobile device and the server for situations where such connectivity is required.

Task scheduler

Using an integrated task scheduler, Avalanche automates the distribution of software packages, firmware and configurations, as well as other tasks to ensure that the network is not unevenly loaded or that the necessary content is delivered where it needs to go.

Security

Advanced security features

Avalanche supports all standard encryption and authentication protocols such as WEP (including key rotation), WPA-TKIP, WPA2 with AES-CCMP, and 802.1x authentication such as LEAP, PEAPv0, PEAPv1, EAP-TTLS, and EAP-TLS. Using Avalanche, enterprises have an additional tool for managing and monitoring security across the entire wireless ecosystem. Administrators can use Avalanche to manage certificates on mobile devices and remotely lock down devices. The rights of users with access to the management console are defined by roles and can be linked to Active Directory.

Automatic data protection and encryption on mobile devices

With Avalanche, you can better protect your devices and data when you move outside the signal of your corporate Wi-Fi network. Policies can be defined for encrypting or deleting files and directories, which can be applied, for example, if contact with the server is lost. This helps protect the corporate environment when a mobile device is lost or stolen. Avalanche can also be used to restrict user access to device setup functions and the launch of non-authorised applications - in other words, it supports kiosk mode.

Helpdesk for mobile users

An administrator can remotely connect to a mobile device via Avalanche Remote Control to diagnose and resolve issues with applications or device settings. He can also simply and visually guide the user on what to do and how to do it. Essentially, the administrator has the same capabilities as if he or she had the mobile device in hand. Remote Control contributes to more efficient use of mobile devices and increased user productivity.

Two-way messaging

Avalanche offers two-way text messaging between the console and one or more mobile devices. The administrator has access to message history and the ability to resend messages. Mobile users can reply to messages and have a text discussion with the console operator.

Flexible architecture

Advanced hybrid architecture

The Ivanti Avalanche architecture minimizes the load on the network infrastructure and allows you to optimize network resources. Services can be run centrally on a single server or on multiple distributed servers at branch offices in accordance with the network topology. For mobile clients, automatic settings can be provided according to bandwidth.

User management

Avalanche allows you to create user profiles that allow users to access only those parts of the system's hierarchical structure that they should have access to. Other parts are invisible to them. The administrator can assign permissions to a user or group of users, define what level of access they have and what operations they are authorized to perform from the console.

Support for devices from a variety of manufacturers

Ivanti Avalanche can be used to manage devices from all leading vendors, including Zebra (Motorola/Symbol), Intermec or Datalogic; the system is not tied to one specific hardware manufacturer. Avalanche supports mobile devices running Windows CE, Windows Mobile (Windows Embedded Handheld), Windows XP Embedded and Android operating systems.

Location services

Using Avalanche, the administrator has an overview of where and how each device is located and used. GPS-based location services can be used. Avalanche records where the device is (location history) or where it was when it was last active. If a mobile device is lost or stolen, Avalanche will help locate the device to street level in cities. For a device on the map, the latitude and longitude and speed of movement are displayed along with its name. Using the geofencing features, it is possible to define the areas in which the device is expected to travel. An alert is generated when a device leaves the defined area.

Web console

The administration of Ivanti Avalanche is done through a web interface. The console features a clear layout of control and visual components, the ability to locate devices on online maps and integrated reporting.

Statistics and reports

Avalanche also offers reports that make it easier to audit the condition and operation of equipment. The predefined reports cover mobile device activity, list of installed software, list of devices and their configurations (inventory), among others.

Bandwidth restrictions

The administrator can restrict the bandwidth required for Avalanche within the enterprise. The bandwidth can be set for certain times of the day, and it can also be defined when software packages must not be transmitted so as not to overwhelm the network. Administrators can also update devices individually on demand.

Alerts

Avalanche keeps the administrator informed about events through alerts. Alerts can be related to security threats, lack of or errors in system resources, etc. Alerts can be defined as required via separate profiles. They can also be linked to email notifications or to a higher-level management system such as Tivoli, HP OpenView or CA Unicenter.

How Ivanti Avalanche works

• The core of the Wavelink Avalanche system is the Enterprise Server (eServer), a service that installs on a Windows OS server machine.
• Distributed Servers (dServers) are used for software deployment and communication with mobile units. The Enterprise Server uploads software packages to the dServers for installation on mobile devices and, in turn, the mobile devices report their status to the eServer via the dServers.
• A client called the Avalanche Enabler is loaded into the mobile units to communicate with the dServer. The Enabler on Windows CE/Mobile can also create a kiosk mode from which the mobile unit user can access only authorized applications.
• L3 connectivity via Wi-Fi network or mobile data is a prerequisite for communication between dServer and mobile units.
• The administrator configures the system through the web interface.

What is needed to run Ivanti Avalanche

• A physical or virtual server running Windows Server that meets the minimum system requirements
• Microsoft SQL database
• Ivanti Avalanche licenses: licenses are available for mobile units with Windows or Android OS and for Remote Control. Licenses are not linked to specific mobile units. If a mobile unit releases a license, that license is applicable to other devices.
• At least one Distributed Server (dServer), for mobile units. The Distributed Server can run on the same machine as Ivanti Avalanche or anywhere else within the enterprise.
• Implementation - to make the system work the way you need it to.