We are proud to announce the release of Gears 'Indiana', which provides support for iOS devices. If you caught our last release announcement, we highlighted many of the new features for our Android app, such as IP reputation scanning, rooted device detection, and a streamlined registration process for management, and we are happy to say that these features are now also available for iOS devices! These new features make OPSWAT Gears a great solution for cross-platform device visibility!
Code Name: Indiana
- Feature comparison
- Feature Spotlight: Metascan-Powered IP reputation scanning for iOS
- Other Fixes and Enhancements
Download the Gears Mobile App for AndroidTM or for iOS!
Download the new Gears Mobile applications and
send us your questions and comments by tweeting @OPSWAT
Gears for Linux, Windows, Mac, Android and iOS Feature Comparison:
Gears clients are now available for five different operating system families, including both AndroidTM and iOS, and we wanted to display all of the available features side-by-side. If you had a chance to see this chart in our last release, you will find the changes in bold:
| Android & iOS | Linux | Windows | Mac OS X | |
| General Features | ||||
| Register to Gears Cloud | Via registration code | Via license key | ||
| Managed Devices | Roadmap | Yes | ||
| Guest (Unmanaged) Devices | Yes | Yes | Yes | |
| Persistent Agent | Roadmap | Yes | Yes | |
| Dissolvable/On-Demand Agent | Yes | Roadmap | Yes | |
| Supported OS | Android 4.1+ & iOS 7+ | Various | Windows XP-10, Server 2003-2012 | OS X 10.8+ |
| Supported Platforms | Phone, Tablet | Desktop, Laptop, Server, VM | ||
| Attended Installation | Via Google Play and iTunes App Store | Yes | Yes | Yes |
| Remote/Auto Installation | No | Yes | Yes | Yes |
| Auto Update | Yes | Yes 1 | Yes (Optional) | |
| Tamper Resistence | Native | Limited | Yes | Yes |
| GUI | User and Pro Mode | Roadmap | Yes (Optional) | Yes (Optional) |
| CLI | n/a | Yes | Yes | Yes |
| GUI Rebranding/Customization | By Request | Roadmap | By Customer | By Customer |
| SDK Available | Yes | Yes | Yes | Yes |
| Detailed Features | ||||
| Infections: 40+ Engine Malware Scan | Roadmap 5 | Report & Enforce | Report & Enforce | Report & Enforce |
| Infections: Repeated Threats | No | Roadmap | Report & Enforce | Report & Enforce |
| Infections: IP Reputation Scan | Report & Enforce | Report & Enforce | Roadmap | Roadmap |
| Detect Current User | n/a | Report Only | Report Only | Report Only |
| Detect Hostname | Yes | Report Only | Report Only | Report Only |
| Detect Network Adapters | Roadmap | Report Only | Report Only | Report Only |
| Detect MAC Address & IPs | Report Only | Report Only | Report Only | Report Only |
| Detect System Language | Report Only | Report Only | Report Only | Report Only |
| Detect System Architecture | Report Only | Report Only | Report Only | Roadmap |
| Detect Kernel Version | Roadmap | Report Only | Roadmap | Roadmap |
| Detect Installed Software/Apps/Packages | Report Only 6 | Report Only | Report Only | Report Only |
| Detect PUAs & Risky Software | Roadmap | Roadmap | Report & Enforce | Report & Enforce 4 |
| Detect Running Processes | Roadmap | Report Only | Roadmap | Roadmap |
| Remote (silent) application removal | n/a | Roadmap | Yes | Roadmap |
| 4-Step Lost & Found Check | Report Only | n/a | n/a | n/a |
| Security Score | Report Only 2 | Roadmap | Report Only 2 | Report Only 2 |
| Device Health Score | Report Only 2 | Roadmap | Roadmap | Roadmap |
| Detect Ad Tracking Status | Report Only 2 | n/a | n/a | n/a |
| Detect Rooted/Jailbroken Status | Report & Enforce | n/a | n/a | n/a |
| Report Disk Encryption Software | n/a | n/a | Report & Enforce | Report & Enforce |
| Report Disk/Storage Encryption State | Report & Enforce | Report & Enforce | Report & Enforce 3 | Report & Enforce |
| Detect OS Version | Report & Enforce | Report Only | Roadmap | Roadmap |
| Detected Installed Antivirus | Roadmap | Report & Enforce | Yes | Yes |
| Detect Antivirus Definition Age | Roadmap | Report & Enforce | Yes | Yes |
| Detect Personal Firewall | Roadmap | Report & Enforce | Yes | Yes |
| Detect Screenlock & Passcode State | Report & Enforce | Roadmap | Yes | Yes |
| Detect Antiphishing Software | n/a | Roadmap | Report & Enforce | Report & Enforce |
| Detect Antivirus Real-Time Protection State | Roadmap | Roadmap | Report & Enforce | Report & Enforce |
| Detect Antivirus Last System Scan Time | Roadmap | Roadmap | Report & Enforce | Report & Enforce |
| Detect Antivirus Detected Threat History | Roadmap | Roadmap | Report & Enforce | Report & Enforce |
| Detect Backup Software | Roadmap | Roadmap | Report & Enforce | Report & Enforce |
| Detect Backup State | Roadmap | Roadmap | Report & Enforce | Report & Enforce |
| Remediate personal firewall | n/a | Roadmap | Yes | Yes |
| Detect patch management software | n/a | Roadmap | Report & Enforce | Report & Enforce |
| Detect patch management agent state | n/a | Roadmap | Report & Enforce | Report & Enforce |
| Detect missing OS patches and service packs | iOS Only | Roadmap | Report & Enforce | Report & Enforce |
| Detect OS auto-update state | n/a | Roadmap | Report & Enforce | Report & Enforce |
| Detect lock screen timeout | Roadmap | Roadmap | Report & Enforce | Report & Enforce |
| Detect available disk space | Report Only 2 | Roadmap | Report & Enforce | Report & Enforce |
| Detect battery charge and state | Report Only 2 | n/a | n/a | n/a |
| Detect location services state | Report Only 2 | n/a | n/a | n/a |
| Detect total and available RAM | Report Only 2 | Roadmap | Roadmap | Roadmap |
| Detect reboot recency | Report Only 2 | Roadmap | Roadmap | Roadmap |
| Detect hardware performance level | Report Only 2 | Roadmap | Roadmap | Roadmap |
Survey/questionnaire integration | No | No | Yes | Yes |
| Adjustable reporting interval | On-Demand | Yes | Yes | Yes |
| Integration | ||||
| NAC for SaaS: Browser Cookie | No | No | Yes | Roadmap |
| NAC for SaaS: Client Certificate | Roadmap | Roadmap | Yes | Yes |
| Local | No | No | Via Registry | Via P-List |
| REST API | Roadmap | Roadmap | Yes | Yes |
| Privacy / Personal Information Controls | Yes | Yes | Yes | Yes |
| Auto-trigger remediation page | No | Roadmap | Yes | Yes |
| Pre-tag/group devices | No | Roadmap | Managed Only | Managed Only |
| Restrict app uninstallation | No | Roadmap | Roadmap | Roadmap |
- Auto update supported on CentOS 7+ and Ubuntu 14+
- Data reported in client GUI, not in the Gears console yet
- Windows includes optional encryption algorithm and key length check
- Mac supports public file sharing and toolbar categories only
- Infection scanning on iOS will be limited on official OS builds, and more extensive for jailbroken devices
- Installed app detection not available on iOS 9
- Yes: Supported now
- No: Not supported, not planned
- n/a: Not available or not relevant
- Report Only: Data is collected by the endpoint and reported to Gears servers
- Report and Enforce: Same as report only, plus the ability to create Gears policies on that data
- Roadmap: Feature is planned
Feature Spotlight: Metascan-powered IP Reputation Scanning for iOS
There are millions of apps available for iOS devices, whether from the iTunes App Store or unofficial sources like Cydia. You may know that jailbreaking your device and downloading apps from untrusted sources increases your risk of infection dramatically, the official App Store isn't entirely without risk either! While Apple does a really good job of keeping malware out of the iOS ecosystem, there are occasional incidents where legitimate applications containing malware make it into the App Store.
Due to the sandboxed architecture of iOS, there are no antivirus or anti-malware scanners in the traditional sense. Recognizing this limitation, and observing the techniques and tactics of iOS malware like XcodeGhost lead us to design and build IP reputation scanning for the Gears mobile app. It provides unique protection for devices while still complying with Apple's policies and because it only runs on demand it doesn't hurt battery life.
Other Fixes and Enhancements:
- Fixed issue causing duplicate access token creation
- Updated PHP sample application in the Developer Portal
- Event log now logs both token creation and token revocation
- Fixed an issue with the action button on the remediation page link
- Early release of open-sourced GPL Gears agent
- Display tablet devices in the Gears management console
