| Table of Contents |
|---|
Requiring VPN for first time registration or on every authentication
...
Here are the considerations related to this decision:
Device validation
SkypeShield matches device by unique device ID.
When using the app – the application sends UDID/IMEI to the Bastion and the Bastion
authenticates it with the Access Portal/DB.
When using Wi-Fi (certificate) – Only managed devices can register and SkypeShield
matches devices with MDM based on parameters such as user, device type, OS version…
In the rare case in which SkypeShield can't do an exact match (for example user has
duplicate/multiple identical devices managed in the MDM) SkypeShield will block all of
the devices of this type if the MDM reports on one device that it is OOC (because
SkypeShield cannot tell which device exactly is OOC)