Introducing inforcer App Management

Aidan Clifford: Great. So, I think we've got a few people joining. I think we've got about 30 of us on the call today. So, really great to see people are very interested in this topic. So, thanks once again for joining. My name's Aiden Clifford. I'm the Head of Business Development for ANZ here at inforcer. Currently just coming into the end of month three, so it's been a great experience so far. Joined today by Nathan Atkins, probably a very familiar face for a lot of you on the call today, who is our Head of Cloud Enablement. He'll be helping us walk through the topic today.

We have had quite a few product updates come through inforcer over the past few months, which has been really exciting for me while getting up to speed with the platform and everything in it. One of the things Nathan and I noticed when we were both at IT Nation a few weeks ago is that we had just launched our App Management feature within the platform, and it seemed to garner so much interest from everyone who stopped by the booth. We thought, why not put on a session today to run through it in a bit more detail for those who weren't able to join us at IT Nation or who missed the announcement?

Without further ado, I'll kick into the session today and walk through what we'll be covering.

Once again, there's your two hosts for the day. If you do have any questions throughout, we've got Nathan, who knows everything tech. He's really getting up to speed but should be able to help out with everything Microsoft 365, including programs, licensing, and how you're able to optimise your business when it comes to utilising Microsoft through inforcer. Please use the chat and Q&A. Make sure you get as much out of the session today as possible because we want everyone to leave knowing a bit more about the topic and how it can be useful within your business day to day.

What we'll be covering is really an introduction to App Management as a concept within inforcer. We know it is a pretty big pain point from conversations we've had with a lot of our partners and MSPs on the road over the past few weeks. We'll also talk through how we've approached this within inforcer and the unique partnership we've established with Devicie, which many people in the market will already know. They have a strong reputation among those who've used their tool in the past.

I'll walk through a little bit of how that works, just running through some slides on that front. But probably the key of what we want to walk through today is Nathan's going to put through a live demo of how it works within the inforcer platform also. And I think that should be a really good chance for anyone to ask any questions, just make sure that we clarify anything that comes through to your usage. And then we'll cover off what that starts to mean for your business, bit more about the FAQs, about the pricing, and just how you can start to get started. But also, if there's anything you want to clarify, please do just chuck that into the chat or the Q&A, as we'll both be keeping an eye on it for you.

Aidan Clifford: So for those of you on the call, we did sort of push this out to people who aren't currently partners with inforcer, but if you haven't been partner with inforcer for too long, I did also just want to start with a bit of a brief about who we are and where the platform has started to continue to grow, as if you were also have been with for a long time, there's probably quite a few more things on this page than when you started the partnership with us.

So for those of you who don't know, we were actually born out of an MSP. So unlike some of the solutions out there, inforcer has been born pretty much out of that MSP ecosystem in order to solve a lot of the problems that you guys see today. And where we see ourselves really fitting in is as that RMM for M365, which has been a largely sort of unattended area of the market for a long time.

We really just want to make sure we're helping our partners secure and manage their customers at scale, which, for those of you who've known me before being on the Microsoft channel for about 10, 15 years, it has been a really big struggle as Microsoft has continued to invest in SMB and put more and more solutions into their security, their compliance frameworks and even from their productivity stack, which has put more and more of a burden on that operational and manual labor from yourselves as the resellers. We're looking to bring through that M365 management, the app deployment, Copilot and now threat detection into that single platform. And we're really excited that this isn't the end of the new products that are coming into the platform as well.

We've also got some pretty exciting SharePoint management tooling that's coming through in the next few months as well, which are, speaking to partners on the road as well. Awesome. Great to see you there, Lyndon. And then we're seeing on the road as well that SharePoint has always been a really big pain point for MSPs, particularly after that COVID period where everyone became a digital cloud user overnight and then continue to add more and more files in there as well.

We won't get into too much today, but if you are interested in looking into our TDR platform, so where we're moving from beyond the prevention side of the fence, where we're looking at the multi-tenancy management, building out your baselines, configuring apps as we'll talk through today, if you're looking for that remediation and response side as well, we do have some pretty consistent demos coming up fortnightly to walk through in a really deep fashion. But if you do have any questions, please do put that into the chat, as happy to take some time towards the end as well.

But what I really do want everyone to take away from this one is, whilst we're looking at the left-hand side of the fence, so looking at the left of boom prevention side, we're also linking to that together that detection and response side. We're starting to complement each other. So once we learn more about the threats that keep through, we're actually going to be giving the options to retrain what that baseline could look like to prevent it from next time, and giving you the tools to proactively have that conversation with your customers, which we know has always been a bit of a challenge. How do you take all of this tech that you're running through day-to-day, keeping those environments protected and consistent and quiet for the customers, but then prove that value? And so making sure you are able to make sure you've got a really profitable setup and able to target new customers also.

But for those of you who are, aren't as familiar with inforcer, and this is sort of news to me as I know that we're only about three years old, is we have proven this at scale as well. So we've got over 1,500 MSPs who've joined us on this journey worldwide also. And that's got a pretty large coverage of about 8 million users. So this, the solutions are proven, and we do have the scale and in the insights and the logging to be able to make sure that not only we making that really robust solution up front, but it's giving us a lot of insights and a lot of feedback from that partner community as to what we're able to do next. And app management was actually the number one feature request for a really long time. So that's why we're really excited to have this session through here today.

Aidan Clifford: But some of the really core parts of our ethos here at inforcer is we, as we said, we're the RMM for M365. So, we do see the tenant as the new server for our MSPs out there. We're starting to see less and less, well, not less and less, we're starting to see more and more new threats through identity versus some of the traditional sort of threat vectors out there in the ecosystem. So, identity is providing, proving to be that new perimeter where we need to start thinking about what is really our prevention and detection and response solution in that identity space and how we're protecting the baseline about that as well.

But then also, speaking to tons and tons of MSPs over the past few years, we know that it's a pretty unique time where customers are proactively coming to us looking to have a conversation around AI and looking to us as the thought, basically the thought leader or the trusted adviser in that scenario. So there's a really good opportunity to demystify that for your customers. Let them know not only how can they take advantage of this thing that is AI, which means different things to different people all the time, but then also utilize that within the products or the solution or the per user model that you're selling to them day-to-day as well, to make sure that you've got a really profitable future-proofed business as this changing market continues to evolve.

So, if we're digging a little bit further into the tenancy being the new server, those of you who are already on inforcer, you probably already have a really good solution baseline around things like data, devices, and identity. And now what we're going to dig into today is how can we start to work that through from an applications perspective as well. So, really start to make sure that there aren't any gaps in what you're addressing for your customers, and how you can make sure that the investment that you're making in inforcer is bringing as much coverage as possible and driving a really good outcome for you and the team.

Aidan Clifford: So if we're looking into app management at scale, really the things that we want to focus on is how do we making sure that there's less administration. You've got better control over this thing which is often tedious, ambiguous, and then a lot of manual labor goes into, and providing for a much more scalable service for you and the team also.

So we will be digging into this with Nathan's live demo. But it's really hard to understate how many devices, or how many applications, sorry, you're actually running on each of your devices for your customers, and how big, how much that problem can actually start to scale. So thinking about the manual processing of a single app across an individual customer and individual version, that's one thing. It's probably pretty tedious. It's probably something your workers don't really want to be doing.

But then if we start to aggravate that, it starts to look like across multiple tenancies, across multiple versions of apps, it starts to build on top of each other as far as the pressure your team's looking to really starting to absorb. It's probably a job that they're not that interested in doing. They prefer to be doing something else. So if you can outsource that and make it more efficient, that's one thing, but then also just the accuracy and the ability to make sure that that customer experience is really fast-paced and through the expectations they likely have, then that is something that they're probably looking to get some really good value out of also.

So, we want to make sure that this exposure doesn't start to compound pressure on your business from each tenancy that you're looking to manage as you're starting to bring on additional customers, or you're starting to roll out higher value services to your customers that you have as well. You want to make sure that you're not absorbing some of that skilled technical time on tasks that you can start to look to outsource to be much more efficient on. You can start purposing these to more higher value services, such as having that AI conversation, that governance conversation as well, and making sure that they're not getting bogged down in the day-to-day.

So as we said, partners were really looking for a solution that required more than just a public application repository, which Nathan will cover off a little bit as well. So the requirement they were starting to look for is how can you have a curated and proven catalog that can work within your business. So you know that there is a, the robust applications are there, accessible for you. They're easy to navigate through and they're easy to scale across the businesses.

As well as with everything in inforcer, we want to make sure that you're in the driver's seat to centrally manage the distribution of these applications in the same way that you're doing it across your policies and your users and your managing your identities, but also controlling those updates. As we know, navigating and maintaining updates is one of the best ways to prevent a breach in the future, as that's usually one of the ways that threat actors are able to gain access to your customer environments. So, the more that you can get that visibility and make sure that those applications are up to date in a really manageable way to set yourself up for success. So, let's kick into how we're able to do that.

Aidan Clifford: So, this is where our partnership with Devicie is. So one of the really good things about Devicie is, Nathan and I managed to go to a MISA catch-up with Microsoft in Sydney just before IT Nation, which was pretty cool. So that was down at the Australian Museum down there in Sydney. So both Devicie and inforcer members of the Microsoft Intelligent Security Association.

So we work really closely with Microsoft. They see us as being on the forefront of working in a really tight manner with them to create really robust security solutions that sit alongside M365. And they're also just really proven in how they're able to vet the applications that are sitting within their catalog, but they're doing a lot of the heavy lifting to make sure that not only are they ready to roll as far as going to your customer environment in a safe and secure manner, but they're making it in a way that is also very easy to navigate, to bring into the inforcer platform, and make sure that you're still the owner when it comes to the deployment and targeting and updating of these applications, versus needing to sit outside a different platform in order to make that happen.

So we are centralizing that experience and making sure that you as the partner are making sure that you as the Intune admins stay in control throughout, and Devicie isn't actually directly touching the tenancy, the customer tenancies directly. They're utilizing that catalog for its intended purpose and not increasing more touch points within that customer tenancy.

Aidan Clifford: So, it's a pretty simple process, but I do just want to map it out before we see it a bit more visually through Nathan's demo. But freely from the catalog through to the Company Portal, there's four main steps that we're going to be focusing on here. First of all, let's browse the catalog.

So, when I think we launched the Devicie partnership just a couple of weeks ago, there was about a thousand applications in there. It's already up to 1,300, and I think it's looking to expand pretty quickly from there. So, it isn't a moment in time. This is a partnership that is continuing to evolve and increasing the coverage of which applications you're able to tap into.

So once you've chosen the applications you're looking to deploy, just picking those test, those tenants that are going to be the target for you. So it could be one customer, could be all of them. You can start to mix, imagine what that starts to look like.

Then making those applications land in Intune. So they're living in the customer's own tenancy. They're not sitting in ours. They're not sitting in Devicie's. They're sitting within the customer's own tenancy.

And then they're able to self-serve and install those via the Company Portal, similar to how you're probably navigating a bunch of the M365 native apps. So there's no need for local admin rights in this instance. They're able to self-serve on that one. So less tickets for you guys, more ways to empower the end users, which saves a lot of time and improves that overall customer experience.

So hopefully that was like a little brief to set the scene on where we've, where we sort of come from and where we are as inforcer as a whole, why we've looked at application management as one of those next big steps to really build out a more robust service within the platform that you can take advantage of. But I think it's probably more important to put the proof of the pudding. If I can pass over to Nathan and we might take a little bit of a look at the platform and how this looks day-to-day.

Nathan Atkins: Beautiful. Thank you, Aidan. So hopefully that's all come through. Lovely. So this is inforcer, as I'm sure a number of you are aware. So the app management lives within the alignment section.

So what I'm going to sort of talk about is, I talk about app management as being effectively two different products. We've got the catalog side and we've got the engine, which is how we deploy the applications. So I'm going to start with the catalog. Now this is the curated catalog that comes from Devicie. So we can browse this catalog. We can search for various different applications.

You can subscribe to them and it pulls it down into your repository within your inforcer instance. So you can see that there's a number of apps that we've already subscribed to, and you can see here that they are built within inforcer and they're now visible. So you can see where, whether they've come from the catalog, which is showing inforcer here, or whether it's been a custom addition. So a custom app is one that you've installed yourself.

Once an application is subscribed and available within inforcer, you can see that for this particular application, it's been deployed to two of our six tenants, whereas this one's been deployed to none. So, if I come in here, I can see the overview, install behavior. I can see the requirements and detection and any advanced information. All of this is built and curated for you. You don't need to change this. This is all set up specifically for you to be able to deploy.

So we can hit deploy to tenants. I can select the tenant that I want to deploy them to. I then hit next.

I'm then presented with two different options. I can do version control. Now the way that this works is that effectively we can have this application automatically update. So as soon as Devicie updates that app within the app catalog, then that update will be applied to your, to the customer tenants via supersedence within Intune. Or you can do no version control, where you control the deployment.

Now this is really useful, this auto update function, because Devicie effectively has the SLA with their applications that most of them are updated within 24 hours. So as soon as an update is available, within that 24 hour period they are updated. Some of them are a little bit more complex, but it's within that 24 to 48 hour window is where those apps get updated, which is really cool, especially if you're wanting to do third-party patching, meet Essential Eight requirements. This is actually part of it. So, this meets that requirement to have that auto update function.

We can then hit next. We can then choose how we want to deploy these groups. So, we can have it required. So, we can select all users, all devices, or we can create our own deployment group. I'm going to just select all devices for this one.

You can also choose to have it available, which means that it's available to your customer base through the Company Portal app, the Intune Company Portal, or you can then choose to have it uninstall as well. So, that's a separate function that you can have to remove an application if you're wanting to deploy it to be removed from any customer devices.

We hit next. We can review all of these options and then we can click deploy, and away that tenant, that application goes and gets deployed. So this is where everything's done for you. You don't need to worry. You don't need to modify any of those sort of functions if you don't want to.

Nathan Atkins: The great little option that we also have is the ability to add custom applications. So, this is great for legacy applications, especially ones that require, you know, license keys or any of those sort of things to happen. We can create a custom app. And the way that that works is that we can open this up.

I'm going to load an Intune win file. So, at the moment, we only support Intune win files being uploaded, but we can inspect that package. Now, this one is a 7-Zip file. So, I'm going to give it my name, what I want to call it, and this is very similar to what you would see within Intune if you're uploading an Intune win file.

The idea being here that we can upload this once into inforcer, set up all the conditions, and then you can have that deploy across to all of your different clients. I can drop a logo in there. I'm not going to. You've got a couple of advanced options as well. Filling out description, developer, etc. Whether you want it featured in Company Portal.

We hit next. We can select our architecture. We can select the minimum operating system version that we want to have it.

Insert a command. So we can have setup.exe /s, uninstall command would be uninstall.exe /s as well. And you can have it install behavior, system, user. Again, you can have your platform behavior. All of this is mimicking what's available in Intune.

So the idea is that all of this can be deployed into Intune as you wish to have it. So we basically then hit next on that.

We then need to set up detection. So you can either set up a custom detection script or you can do another rule. So you can have a file, look for your path. So Program Files backslash 7-Zip, and then the file folder name is 7zip.exe. So you just fill in all of this information for how it detects whether that application is installed or not.

We can then look and review and then hit add to catalog, and that will upload that application and create it. So inside of our catalog, you can see here that we've got our custom application. This is one that we've uploaded earlier.

You can see it's our RMM agent. So we use an RMM called Datin. I believe in this world data and Ninja merged. So they're now called DATN.

But what we can do here is we can click on this application. We can see the install behavior. We can see the requirements that we configured for this as well. All of this is exactly the same as it was before.

Now what we have here is the option called custom install strings. Now I've created and assigned it specifically to this Datin agent, and I've got a variable here created called RMM site ID. So the idea here is that we can add variables. So variable name could be license key.

And the idea here is that when you're deploying an application that may require a license key, whether it be something like AutoCAD, PDF Exchange, some of these sort of fairly common applications that you might see out in your client base, you can pop in a variable here that can replace it. And so the idea is with this application that we've got here, if I come in here and click on my tenants, I can see all of my various different customer names and I can pop in the site ID that is specific to them. So all of them have different ones because obviously you can't have similar ones. And then away we go.

That's all now been populated. So if I hit save, I can now deploy this agent and it will do setup.exe with that variable applied, and it will deploy that application. So you can see all of my tenants are now ready. I can go back to my catalog, deploy this application to my tenants. So I can select all, hit next, auto update again if something automatically happens. Same sort of controls as this.

We hit next and review, and it all looks exactly the same, but we know that the install string is going to be different and it's going to have that variable to deploy the site ID to make sure that this RMM agent gets deployed without needing to change it. Now I'm sure if any of you are deploying RMM agents or applications that have these requirements there to have various license keys, you will be having to create the package for each individual customer, and that gets really painful.

So this is where that time save comes in, by being able to build the package once. And so you need to build it once, but then you don't have to build it for each individual client. You don't have to upload it into each individual tenant. It can all be managed through here, through inforcer, in one go.

Nathan Atkins: And then from a tenant perspective, you can actually come in here to a tenant, and under our Intune apps here, we can pull in whatever applications have been detected within that tenant that are stored within Intune. So in this particular tenant, we can see that 1Password is there. 7-Zip's already there. It's the latest version. It's automatically patched. We can see that the last update was on the 9th of September at 5:30 and 4:30 p.m.

So, there's been no update to these devices. It's required for all devices and it's not available, uninstalled. And you've got a couple of different actions here that you can take. So, we can open the detail or remove the app. And inside the detail, we can see all of the configurations that have been applied to this customer. And we can even see it in Intune if we wanted to have a look at it directly.

So this gives you a nice view of all of the applications that are managed. And if you're wanting to use something like App Control for Business for your application whitelisting, you have that option to tick that managed installer function. And that means that any application that is pushed through Intune, that's updated through Intune through that supersedence, anything that gets pushed automatically gets whitelisted. So you don't need to manage XML files. You don't need to manage all of these other applications.

For applications like Google Chrome that have automatic updating functionality, you'll want to disable that. And so you can manage it automatically this way. And it makes, you know, App Control for Business or WDAC, however you want to call it, much easier to manage from within an Intune environment using the Intune app catalog that we've got. Makes you Essential Eight compliant, and effectively it's really easy to deploy and manage these applications at scale. No longer will you guys need to go into each individual tenant and upload and create packages. So it's so much easier to do it this way.

Thanks for the applause, whoever that was. So if you guys have any questions, please feel free to ask them. And I'll hand back to Aidan and I'll reply to any in the chat.

Aidan Clifford: Yeah. No, I was just wondering, Nathan, if it's good to just walk through a few of them.

Nathan Atkins: Happy to do that.

Aidan Clifford: So I've just got a question here for, is there an ability to copy an existing app from the tenancy into inforcer?

Nathan Atkins: No, you will have to upload that Intune win file into inforcer.

Aidan Clifford: Okay, awesome. Next one. When publishing an app, if it is set to auto update but the version needs to be rolled back, for example across all tenancies, is there something inforcer can help with? Is there something inforcer can help with?

Nathan Atkins: So some applications, and I do say some, it's basically a straight overwrite. But the majority, where it is a upload, you do have that version control history. So we will go back about a version or two to have them available. That's, it is dependent on the application. So it depends on how it gets packaged and built, etc. But if you guys create them as well, you'll have version control on those that you get uploaded.

Aidan Clifford: Awesome. And next one, I think I know this one, but to correct me if I'm wrong, Nathan, but macOS support or just Windows currently? My understanding is that we've started with Windows, but Mac is starting to come in next month, I believe.

Nathan Atkins: But yes, next month is macOS support being brought in as well.

Aidan Clifford: Awesome. So, that's one of the things that I'm really excited about. I think it's a theme across inforcer in general, but particularly for the topic of today, is just where things start, they do evolve really, really quickly as well. So, do watch this space, but really excited to have that macOS support coming in in October, which is just around the corner. Next question is, noticing the Intune win files, is there a plan to support arc Windows machines for both catalog and custom apps?

Nathan Atkins: It's a good question. I'll need to ask the product team on that one. Yeah, I don't know. I will come back to you on that one.

Aidan Clifford: Awesome. I might do a couple more and then I'll power through, and then we can save some for the end if we miss them. But if you're able to jump into the chat, that'd be great. So for assignments, when will we get the ability to use filter with the all devices or all users default groups?

Nathan Atkins: You can create your own group within inforcer and filter it that way. So you can use the usual deployment group filters. So there is a function there to create your own group and then deploy that to all of your customers. So you might do it application-based and then filter that way, and then you can assign that application to that group.

Aidan Clifford: Perfect. And last one before we sort of power through, but I'll get up to, we can catch up with that, Cory, your question at the end if Nathan isn't able to get through it in the chat in the meantime. But last question is, are automatic updates supported for both system-installed applications and user-installed applications?

Nathan Atkins: Yeah, as long as it supports, as long as you can upload it through using supersedence, it'll work fine. Yep.

Aidan Clifford: Amazing. Well, thanks for all the questions. Always love the engagement. So, please do keep them coming and we'll make sure we get through them throughout the session or towards the end when we have some Q&A time. In the meantime, I'll just go ahead and reshare my screen just to jump through the rest of the slides, because one of the things that I wanted to be mindful of is, thanks very much Nathan for running through the technical demonstration of how this works. And it's great to have you on the call to provide that level of detail.

But one of the things we also really want to tie these conversations into is, what does it mean for your business? I think if you've connected with the team, we're always looking to make sure we're, how do we generate more revenue for you guys out of these things? How do we drive that efficiency and how do we reduce your risk across your customer base? Those three core evergreen pillars that we have in tech. So let's have a look at what this can mean for your business today.

So Nathan mentioned it quickly there before, but one of the really exciting things in the conversations we had out of IT Nation, really sort of opened my eyes a bit more, is hiding in plain sight because I just needed to remember it, but this does give you an ability to fill in one of the final gaps within the Essential Eight through the inforcer platform. So through patching applications and application control, this is the way that we want to make sure we've got as much coverage across either the Essential Eight, but it ties really closely into SMB1001 or CIS controls or whichever frameworks you're looking to align your services to.

You may have solutions in the meantime. You may be doing some of these processes manually to tick the boxes and provide that framework to your customer. But one of the things that we want to be mindful of is, through your investment in inforcer, how can you continue to consolidate as much of this experience across M365 into our platform to get the most out of it day-to-day, to provide less touch points for your team and drive that increased efficiency, which ultimately turns into either internal savings or the ability to spend more time with your customers and drive additional revenue through those channels as well.

So really, we see by providing additional coverage into the Essential Eight here, it's really just the regular backup sitting there, and I'm sure everyone on the call today has their own 365 backup solution in place. But where it's coming across the other parts of the Essential Eight, really happy to say that inforcer has you covered there.

So as we're continuing to consolidate your M365 experiences, not only we're starting to talk about, I'll mention a bit about the price, but I've got a bit more about it at the end as well. If you're utilizing external or different third-party app patching solutions to help with this pain point, often they're priced per endpoint, and where I start to see here is some of the pricing is quite high when it comes to some of the solutions out there in the marketplace as well. So just wanted to update from the inforcer side. If you're an inforcer partner, you get a one flat add-on per month fee across your entire inforcer customer base of 399 AUD, which is not too bad value when you start to scale it across the amount of customers you're operating with that there.

So hopefully some good news for everyone who's looking to make sure that you can take advantage of this within the inforcer platform. As we're saying quickly there, just it's making sure that to attack this issue, you don't have to get another platform as well. You're able to utilize that with your already multi-tenancy platform in inforcer. So get more value out of the platform, get to connect with more people like Nathan, who's obviously a fountain of knowledge on these things, and the rest of the team.

And then where do the apps live? They're not sitting outside your customer's own environment, which we did hear as a pain point with some solutions out there. They're sitting within your customer's own tenancy via Intune. So restricting any issues or compliance sort of compromises from that regard as well.

I did just want to add a little bit of a vision into this as well. You may have seen some of these slides if you're at the Purview road shows that Microsoft were holding, where we co-presented with them recently, but I just wanted to start to think about, you may be adopting these into your stacks that you're delivering through your customers and standardizing your offerings, or maybe something that you're working on.

But where we start to see more and more guidance from some of either the MSPs who've adopted this and have been really successful or some of the MSP consultants out in the marketplace today is, how do you start tying this into your offering to make sure you're not only really communicating clearly what you're providing through to your customers, using our reporting and auditing engine in order to really proactively show that to prospects and to current customers, but how does that start to pay off as far as the different tarings you can provide too.

So it doesn't really matter where you start to fit it into these sort of good, better, best models or however you're marketing these solutions to your customers, but through that additional coverage of your frameworks like Essential Eight or SMB1001 or whatever you're using, by integrating that into the inforcer platform, you can really clearly communicate that through where it fits into that stack.

So in this example here, we have that sort of standardized M365 environment. We are starting to utilize sort of policy management consolidation and standardization across the base for all of the good things that all of our customers need. But if you wanted to increase the coverage, start to provide more framework gaps, more audit-ready change histories, more ways that you can communicate to them the hard work that you're doing in the background, this is where in this example you can start to tie in that alignment to Essential Eight, or aligning it to the different maturity levels and those sort of things as well.

And it's another stepping block if you are trying to get towards those Purview conversations as part of AI readiness, which may be the next cab off the rank when you're going further and further up the stack that you're looking to offer. Which is probably a session that we'll hold again in a couple of weeks time, because Nathan's been doing some really great work with Microsoft on how we're able to roll out policies across the Purview stack and those add-ons for Business Premium, which is providing more and more value into SMBs as well.

So, do work with us. We want to make sure that you're really empowered for these road maps with your customers, because the more value you're able to get out of the platform and deliver to your customers and communicate, it's going to be much more profitable at the end of the day, but not necessarily the biggest lift as far as the resources required to do it, if you're using inforcer as that platform to scale out those efforts as well.

So not necessarily aligned to application controls today, but we are seeing more and more really positive partner stories come through of how people are starting to get more, get value out of the platform and how it really turns into quite tangible deliverables for those businesses. So we've been working with quite a few of these businesses for a few years.

So Sharpie IT, which does relate down to that Essential Eight policy that we've been alluding to as part of app management, they're able to provide this service that they'd already mapped out to their customers, which took them 40 hours to deliver, but utilizing the standardization in our platform, they're able to deploy the same project within 4 minutes as well.

So, doesn't take too many hard maths to realize how much more profitable that's going to be if you can utilize that time and energy elsewhere, because we are seeing a really consistent theme of, the more that we can partner on these topics, the more you're able to reduce down these multi-hour, multi-day projects just down into a really repeatable, consistent, fast-to-market way, which pays off for your business. Working with MSPs for a long time, I don't think I've ever met one that says, "I've got a lot of spare time. I don't know what to do with it." Everyone's always spent, there's always over resourcing for the requirements of the customers you're working with. So getting this time back in your pocket is obviously going to pay off dividends.

Similar story with National IT. This one was more around onboarding. So we can tie application management into onboarding those new clients as well. Usually one of the heaviest tasks, which does restrict MSPs that I've spoken to, of basically adopting new customers, bringing new customers into the fold, is the ability to management them and onboard them. Working with National IT, they're able to see a reduction down from a week down to a day of that onboarding process, obviously a pretty dramatic reduction here.

And as we're saying at the start of the session, we have been able to prove this solution across at scale, not only the amount of MSPs that we're working with, but some of the biggest names in the region as well, through effects, managing inforcer over a thousand tenancies and providing that really consistent standardized view as well. So if you're an inforcer partner, we'd love to keep talking about these. So if you do have any success stories or any ways that been using the platform, we'd love to have a chat and see how we can capture these up and really share those messages across. But these are some of the partners we've been seeing some really good results with over the past few years.

Aidan Clifford: I did want to kickstart. It was great to see so many questions coming through there, but we do have some common questions I just wanted to touch on, just in case we hadn't seen them in the Q&A, but we'll make sure we get to any other questions that have come through in the meantime.

So, do I need Intune in order to use this? The answer is yes. Applications are delivered through Intune. So customers will need Intune licensing, typically Business Premium and above, in order to make this work.

Who's responsible if the application goes down or breaks? So Devicie sources, repackages and security checks the catalog, and so we own the deployment of that through Intune, but your Intune admins stay in control throughout. So it is that partnership there, but please do reach out for us for any support tickets that you need at any stage during this.

How's the application management priced? So, it's a one flat add-on fee per month of 399 AUD. So, this covers your entire inforcer account. So, it's not per endpoint or per tenant to add this on.

It's just one flat fee to cover all of the customers you have through the platform. So, the more tenancies you have within the platform, the better that we're able to scale that flat cost out for you. But doing the maths of what we've seen out there in the market, I think it's priced at a pretty good value spot, shall we say.

How is this different to patching through my RMM? So RMM is usually fire and forget from what we've seen out there. So the install validation or self-serve path is a bit unclear. Sort of deploying through Intune, we can give you that clearer source control, and starts to tie into more of the engagements of consistency of how you're utilizing Intune across your customer environments as well.

Can users install apps without being local admins? Yes, that is, that's, we're able to provide here. So we're able to approve apps and publish them to the Company Portal so people can self-serve and install them as they need themselves.

And then finally, how do we activate that? Through activate Intune app catalog in the inforcer platform. So if you were looking to activate this one today, you can use, go to the inforcer platform, go to configure licenses, and under add-ons, there's the Intune app catalog, and just click add license within there. If you do switch this on, it'll be co-termed to your current inforcer agreement. So it won't be creating a new agreement or any other timelines than what you're already working through with the inforcer team. And then is available across your whole account, which we covered off.

So if we think about where we started, all of the new features that are sitting within the inforcer platform, I just wanted to show just how we're starting to evolve that narrative quickly before we start to look at a few more of the questions that are in the chat there. But it's some of the ways that we've traditionally seen the prevention and then the detection and response side of the conversation, they've always been quite separate as we've seen in the market today.

So following the strategy of inforcer. So whilst we have the runs on the board when it comes to the left of boom or the M365 management, we're pretty excited as far as where the TDR solution is able to take our strategy, because not only are we able to move to that right of boom side if a threat does get through your baseline, but we're able to give you the tools to communicate that clearly to your customer, remediate those threats starting with identity, and we'll be looking at endpoint sort of early next year as I understand it. But we can take those learnings and then reinsert them back into those baselines that you've built out.

So it becomes a sort of a symbiotic relationship versus two separate pillars, and then you're able to make sure that you can rebuild out those baselines whilst communicating through to the customer that experience across the whole journey as well. So rather than having to then go through and work through non-consolidated platforms to get all of this information, communicate it through and then manage it at the end of the day, we're pretty excited to see, as we continue to evolve in this space, to bring it all together and hopefully make your lives a lot easier and then make it a lot more profitable with those relationships with your customers also.

So I just want to say thanks for everyone's time as well. I think it's been a great session. I really appreciate Nathan taking the time to walk through that live demonstration. But I did see a few notifications coming through in the chat in the meantime. So I might start scrolling through and see we've got in there. Have you got, Nathan? Have you had a chance to resp them all?

Nathan Atkins: Yep. All right. Working hard.

Aidan Clifford: That's right. Awesome. Cool. If we've gone back, if everyone's received a response, feel free to repaste into the chat if there's anything that we did miss along the way, or if there's any other questions you'd like us to cover whilst we're all together. Otherwise, we might just stay on for a few minutes and just, yeah, give everyone time to chuck anything into the chat. But if you need to go have your lunch or you've got some meetings coming up, feel free to jump off. We'd love to see you next time.

So, we do have a question. Any app management TDR pricing bundles? So, at the moment, it would be the current pricing, but we might be some updates. If you feel free to send an email through to your success manager there, Chamir, and we can have a chat about what you're looking to do there.

Awesome. Thanks, Brett. Awesome. Thanks, Shir. Beautiful. Cool. Thanks, everybody.

Nathan Atkins: Oh, so yes, the custom app deployment is a free feature. So that's where it's like the app catalog is a separate thing and then the engine is its own. So the engine is free and included in inforcer. The catalog is the one that you have to pay for, cover our storage costs.

It's a good question, Addison. There is an intention to be able to see it. In terms of being able to request more, they haven't worked out a process yet. So, I've asked that question. No one's obviously anywhere near the limit just yet. But if they do, I'm sure there will be a provision for that. But yes, they're looking and working that one out in the background at the moment.

Aidan Clifford: Awesome. Thanks, Erica. No worries. Awesome. Just give it another 30 seconds and then we might, yeah, put this one down and might be coffee time.

I think everyone's ducking out now. Appreciate everyone taking their time. I might end the meeting there, but please reach out if you have any questions. More than happy to help. Have a great day.