Product Documentation

What's New

Dec 21, 2015

This release of the XenMobile Device Manager (MDM edition) contains the following new features:

  • Citrix Mobile Enroll for iOS Users. The Citrix Mobile Enroll app enrolls first time iOS users into the XenMobile system, enabling those devices to be securely managed. Once enrolled, iOS users can receive the Worx Home app and access to the Worx Home Store. (Citrix Mobile Enroll is only needed once by first time XenMobile iOS device users.)
  • New Worx Home App for iOS and Android. The new Worx Home app provides access to features provided by both XenMobile MDM and XenMobile App on their iOS and Android devices:
    • Secure document and file access through SharePoint DLP (local and shared) and ShareFile
    • Worx Store access to wrapped apps distributed through XenMobile App Controller
    • Location services, such as geo-locate and geo-fence
    • GoToAssist features for remote support, such as support ticket creation, chat, calls, and email
    • Log collection for support
    • Upgrading customers can update their Connect apps to Worx Home through the iTunes or Google Play app stores
  • Works Home Store for App Delivery. The new Worx Home Store for XenMobile MDM and Enterprise iOS and Android users provides access to a variety of apps from Device Manager and App Controller (and XenDesktop through App Controller). Upgrading Citrix Receiver users will retain their HDX apps, and new users can access their HDX apps if Citrix Receiver is installed on the device. The Worx Home Store can also be branded with a custom image or company logo.
  • Works Home for Windows Phone 8. Worx Home for Windows Phone 8 provides an Enterprise app store for Windows Phone 8 devices for XenMobile MDM users, and can deploy Windows Phone 8 apps as well as custom built Windows Phone 8 app store apps.
  • Citrix WorxMail for Secure Email Management. Citrix WorxMail provides secure email app for XenMobile Enterprise iOS and Android users enabling secure email access and access email on their devices, providing control over email body and attachment, the ability to set “Open in” controls and data leak protection, send email with ShareFile attachments (XenMobile Enterprise edition only), block users from email who have rooted or jailbroken devices, set policies to require password and/or Wi-Fi or Network connection for access, and more.
  • Citrix WorxWeb for Secure Browser Management. Citrix WorxWeb for XenMobile Enterprise iOS and Android users enables policy control over native browser for secure web access, such as:
    • Block unapproved web sites in the browser
    • Provide custom bookmarks
    • Block users who have rooted or jailbroken devices
    • Require log in using pin or password, or pattern screenlock
    • Require Wi-Fi or internal network controls
    • Block screen capture, camera, location services, SMS
  • Secure Browser with Citrix XenMobile Web for iOS. You can configure policies for the Citrix XenMobile Web to block unapproved web sites in the browser, provide custom bookmarks, enable selective or automatic cache clearing and browsing history deletion, enable or disable document or file download, prevent launching new URLS, plus the ability to show or hide the URL address bar.

New Device Manager Features

  • Streamline Enrollment for Citrix Mobile Enroll on iOS. You can streamline the iOS enrollment process on Citrix Mobile Enroll by configuring a publically trusted SSL cert on the XenMobile Device Manager server, which eliminates requiring the end user needing to install the root CA.
  • Role Based Access Control (RBAC) Additions and Enhancements. This release has extended Role Based Access Controls (RBAC) for all of the Device Manager tabs across all features, providing more ease of use in assigning features to user roles.
  • App Store Branding. You can now customize your iOS or Android app store to match your company branding, look and feel, giving it a custom logo.
  • Terms and Conditions Acceptance Reporting. You can now generate a PDF report of users who have accepted and declined custom Terms and Conditions during the device enrollment process.
  • Cisco AnyConnect VPN Policy for Android. Provides the ability to push and auto provision Cisco AnyConnect VPN configuration such as user credentials, identity certificates along with LDAP authentication and user ID certs.
  • Support for Entrust PKI Credential Provider. This release provides Entrust PKI Credential Provider support to enable users the ability to request user identity and device identity certificates; ability distribute user identity certs to mobile services such as Exchange ActiveSync, WiFi, VPN, SharePoint; ability to automatically renew user ID and certs without disruption of service; and the ability to revoke certs for targeted user and/or devices.
  • Renaming File for Upload. This feature allows you to rename a file or an app when you upload it to XenMobile Device Manager, so when you push the file to device, the name is changed to the custom label you specify.
  • Automatic Notification for APNS Expiration. Admins can now configure notifications to be sent to alert users before their APNS expires.

New Device Manager Server Components

  • XenMobile Mail Manager (XMM) with Windows PowerShell and Office 365 Support. The XenMobile Mail Manager (XMM) provides a non-Gateway solution that provides control of Microsoft Exchange traffic without requiring TMG or NetScaler. Instead of blocking mail traffic at the network Gateway through a proxy, XenMobile Mail Manager programs Exchange to block or allow access to mail based on your company’s security and compliance policies.

    This solution provides a native Mobile Service Provider to XenMobile server that can snapshot and query Blackberry Exchange Servers (BED) for BlackBerry device management so you can manage Blackberry, BB10, Windows 8, Palm, Non-Samsung/HTC Android devices, integrating Citrix GoToAssist functionality. It also provides support for Windows PowerShell (command line APIs) to support Exchange Access Control for those customers who use a hosted (cloud) Exchange service, as an alternative to TMG for basic ActiveSync controls.

  • XenMobile 8.5 XenMobile Mail Manager - BlackBerry Support.
    • BlackBerry 10. Ability to recognize Blackberry 10 devices through XenMobile Mail Manager (XMM) ActiveSync traffic filtering and either allow or deny ActiveSync traffic. Also, ability to quarantine BlackBerry devices.
    • BlackBerry BES 5. Ability to monitor BlackBerry devices from BES 5 servers through XenMobile Mail Manager (XMM) and provide device management operations such as remote wipe or password reset.
  • XenMobile NetScaler Connector (XNC). The XenMobile NetScaler Connector (XNC) provides a device level authorization service of ActiveSync clients to NetScaler acting as a reverse proxy for the Exchange ActiveSync protocol. Authorization is controlled by a combination of policies defined within the XenMobile Device Manager and by rules defined locally by XNC. XDM provides whitelisting and blacklisting of devices based on compliance with high-level policies such as detection of jailbroken devices or detection of specific apps. The XNC local rules are typically are used to augment the XDM rules in cases where specific overrides are required; for example to block all devices using a specific operating system version.

New Android Features

  • Support for Samsung Knox Container and Security Policies. This release provides policy support for the new Samsung KNOX security features, which provide the ability to push policies such as such as password, app restrictions, advanced remote support, kiosk mode to the Samsung device KNOX container using a deployment package.
  • New Samsung SAFE Policies. This release provides support for the following Samsung SAFE policies:
    • Samsung KIOSK Mode
    • Ability to set lock and home screen wallpaper
    • Ability to populate required or whitelisted applications in the dock bar
  • Android App Lock Policy User Interface. XenMobile Device Manager web console provides a user interface for creating Android an app lock policies, rather than editing the native XML file. App lock functionality is extended to include the ability to Allow or Lock Google Play, Camera, Settings, YouTube. Advanced settings include setting app Backlist or Whitelist, or restrict apps based on app package id. (Note that pre-existing Android app lock policies configured in XML will have to be manually converted).
  • Android Device Lock. Allows you to lock a device and choose whether to allow the user to unlock using their own password, or enforce an admin-supplied password for unlock.

New Windows 8 Features

Support for App Delivery to Windows Phone 8. You can now publish and distribute Windows Phone 8 apps directly your users using an Enterprise Hub policy and an application enrollment token (AET), which enables you to bypass the Windows Phone Store.