About the Anti-Theft Features in Symantec Mobile Security 7.2

Article:TECH202913  |  Created: 2013-02-19  |  Updated: 2013-03-27  |  Article URL http://www.symantec.com/docs/TECH202913
Article Type
Technical Solution


Issue



An Android device secured by Symantec Mobile Security 7.2 (SMS 7.2) has been lost or stolen.  What actions can be taken to locate the device or to disable it and prevent the loss of the data on that smartphone or tablet? 


Error



When an Android is locked by Mobile Security, the screen displays a message similar to:


Solution



Accessing the Symantec Management Console (SMC) to the Symantec Management Platform (SMP), an administrator can attempt to locate a missing Android device, can lock the device or wipe it.  It is also possible to turn on a loud alarm that will draw attention to its presence.

 

Locating a lost or stolen Android device

Enrolled Android devices send their location information to the Symantec Mobile Security server (the Symantec Management Platform) at regular intervals. When you view the device information in the console, the device location is shown on a map. 

  1. On the console, go to Home> Mobile Security > Device Management and in the left pane, click Manage Mobile Devices.
  2. In the right pane, select the device you want to locate. (Note: Use the search tool to more quickly find a device within a long list.)
  3. Right-click on the device you want to locate and from the menu, select Android Security > View device information.

 

When locating a device, be aware of the following:

  • The location that is displayed shows the location of the device at the time of its last check-in with the server. By default, location information is sent to the server once an hour. This interval can be adjusted by making a new policy available to the device.  You configure check-in times on the Communication tab of the Android security policy.
  • If Google Cloud Messaging (GCM) is configured, you can push a command to the device to have it send its current information, including its location.
  • Locating a device requires that location services are enabled on the device.

 

Locking a lost or stolen Android device

An administrator can remotely lock a managed Android device to prevent unauthorized access.  

  1. On the console, go to Home> Mobile Security > Device Management and in the left pane, click Manage Mobile Devices.
  2. In the right pane, select the device you want to locate. (Note: Use the search tool to more quickly find a device within a long list.)
  3. Right-click on the device you want to lock and from the menu, select Android Security > Secure lost/stolen device.
  4. Enable the Lock device option. If you only want to lock the device, disable the other options.
  5. Make note of the auto-generated passcode, or enter a new passcode that you issue to the device owner to unlock their device. Record this information at the time when the Android is locked.  If the code is lost, see Locating the password that was used to lock a mobile device 
  6. Optionally, modify the text message that appears when the device is locked.
  7. Click OK.

This feature will enable the screen lock security capabilities of the Android device, using the PIN as the code necessary to access the phone.  This can be changed or disabled in Settings, Location & Security settings, Change Screen Lock.  

 

Wiping data from a lost or stolen Android device

You can remotely wipe the data from a managed Android device to prevent unauthorized access to media, apps, and sensitive information.  

Warning: Unless previously synched with a backup system, any data, apps, or media on the device and its SD card are permanently erased. The call history and contacts list on the SIM card is also erased and the device is restored to factory settings.

 

  1. On the console, go to Home> Mobile Security > Device Management and in the left pane, click Manage Mobile Devices.
  2. In the right pane, select the device you want to locate. (Note: Use the search tool to more quickly find a device within a long list.)
  3. Right-click on the device you want to lock and from the menu, select Android Security > Secure lost/stolen device.
  4. Enable the Wipe device option. If you only want to wipe the device, disable the other options.
  5. Click OK.

 

Triggering an alarm on a lost or stolen Android device

  1. On the console, go to Home> Mobile Security > Device Management and in the left pane, click Manage Mobile Devices.
  2. In the right pane, select the device you want to locate. (Note: Use the search tool to more quickly find a device within a long list.)
  3. Right-click on the device you want to lock and from the menu, select Android Security > Secure lost/stolen device.
  4. Enable the Turn on alarm option. If you only want to sound an alarm on the device, disable the other options
  5. Set the duration and number of times to repeat the alarm sound.
  6. Click OK.

 

Time Required 

Depending on when the device is set to check in for new security actions, and whether Google Cloud Messaging (GCM) is enabled, it can take 30 minutes or longer to lock, wipe or alarm the device. By default, the scheduled check-in is set to 30 minutes. This value can be adjusted up or down as desired. GCM allows the lock command to be pushed to the Android device.

 





Article URL http://www.symantec.com/docs/TECH202913


Terms of use for this information are found in Legal Notices