We recently performed a security audit and discovered that our Blackberry is a 
weak point.  Blackberry applications exist that can forward data to an outside 
source without the user's knowledge.

I'm testing options to lock down our devices.  I found an IT Policy setting 
which requires the user to enter their password to install an application, 
which would prevent  someone from snatching a device off the table and loading 
an app OTA.  I'd also like to have the option of locking down the device 
completely, so no apps can be installed, and then possibly the option of 
locking down the device so that only apps I OK on the BES are allowed to be 
installed, but at the user's request.

My 1st question is how can I prevent all applications from being installed?  I 
looked in IT Policy and found only a setting that prevents non-RIM signed apps 
(Under Security Policy Group -> Disallow 3rd party application download).  Is 
there something that locks it down even further?

2nd question - Is there a way to whitelist applications?  Ideally i'd like to 
put the app on the BES and have BES scan and allow that application.  I don't 
want it to install, but rather just say it's OK if someone else installs it.
_______________________________________________
Bes-Admins mailing list
[email protected]
http://www.dataoutages.com/mailman/listinfo/bes-admins
http://www.dataoutages.com
RSS Feed: http://feeds.feedburner.com/Bes-admins
---------------------------------
Bes-Admins mailing list is Sponsored by Port3101.org : Your BES Connection. 
http://www.dataoutages.com/3101

Reply via email to