Android Device Enhancements

• Creation of a KNOX container on KNOX-capable Samsung devices.
• License Management:  Ability to enter a license key for KNOX.
• Security:  New buttons in the Device view for locking, unlocking, and removing a KNOX container and for resetting a container password.
• Configuration policies for KNOX containers:
  • Application Policy:  Manage apps installed in the KNOX container.  Manage data and cache clearing for KNOX container apps, uninstall/disable these apps, add/delete Home screen icons.
  • Browser:  Configuring the installed browser
  • Certificate Policy:  Manage certificates used to secure data and connections.
  • Exchange Account Policy:  Configure Exchange Accounts.
  • Firewall Policy:  Configure Firewall settings.
  • Password Policy:  Enforce a password.
  • Premium VPN Policy:  Create and manage VPN profiles.
  • Restriction Policy:  Set restrictions including the ability to disable the camera.
  • Security Policy:  Configure security including the ability to enable Samsung Attestation.
  • Single Sign-On Policy:  Configure Single Sign-On.
• Configuration policies on Samsung SAFE device:
  • APN Policy:  Configure APN profiles.
  • WiFi Policy:  Configure Wi-Fi connections.
  • Bluetooth Policy:  Enable discover Bluetooth devices.
  • Ristriction Policy:  Allow multiple users.
• Scheduling:  Improvements to the client connection scheduling.  Set a connection schedule based on a date, date range, repetition, and randomization.

iOS Device Enhancements

• The following payloads are new or updated for iOS7:
  • Guided Access
  • Font
  • Web Content Filter
  • AirPlay
  • AirPrint
  • Enterprise SSO
  • Organizational Info
  • WiFi
  • VPN
  • Cellular
• Support for ArtWork and App Icon image for custom B2B apps.
• Volume Purchase Program License Management:  Enables enterprises to puchase iOS apps from the App Store in bulk, and assign the apps to users, while retaining full control and ownership of the app licenses.
• Support for the updated version of NitroDesk TouchDown client for iOS 7 devices.
• Support for adding a message and phone number when a lock command is sent to iOS 7 devices.
• Support for MDM-first enrollment of iOS 7 devices.
• Support for applications that are installed using MDM but are not managed.
• Support for the creation of Per App VPN Payloads.
• Hardware Inventory:  New options in Device and WIFI Device settings in Device Inspector.

Windows Phone Device Enhancements

• Application policies are available for deploying Windows Store and enterprise applications.
• Apps are automatically removed when the device is out of MDM control.
• Featured categories and listing of featured apps.
• Rich content for enterprise apps.
• Signing the Afaria application with the AET certificate for the enterprise.
• Location collection is enabled for device tracking.
• Afaria application silently installs on the device after the device is enrolled in management
• Application deployment and management performed through the Afaria application.
• MPNS support:  Send adhoc and remediation messages to devices using MPNS.
• Self-service portal user prompt variables support.
• Package tracking logs are available for Windows Phone enterprise apps.
• Collects software inventory details related to the enterprise apps on the device.

Administration Enhancements

• Self-Service Portal enhancements
  • Supports the enrollment of iOS 7 devices (MDM first enrollment).
  • Configuration of enrollment codes for SSP moved from the installer to Afaria Admin console.
  • Improved identification and respresentation of Android tablets.
• Multi-tenanted message logging improves the logging system and privacy in Afaria by showing only the log entries for the selected tenant.
• Custom data views will only display in the context of the tenant that created the view.
• Afaria managed authentication can be set for individual tenants.
• Packages are cached locally on the Package Server file system.  package is cahced on its first download and improves app delivery performance.
• Expanded role permissions on policies, groups and device security actions.
• Changed to Navteq maps for the Afaria console and self-service portal.
• Administrator can add a custom button to the Device page toolbar.  For a selected device, it opens a new page and sends information about the device.

Infrastructure Security Enhancements

• Set up access control for hosted email by configuring Office 365 or local email using Microsoft Exchange 2010 and 2013 Powershell commandlets.
• Added Web Services to support calls from a variety of network access control products.