The documentation that RIM puts out is pretty good. Problem being . most people don't take the time to read through it. It gives you recommendations on ways to meet your security requirements; just need to put in the effort.
From: [email protected] [mailto:[email protected]] On Behalf Of Jim Clouse Sent: Tuesday, July 20, 2010 2:07 PM To: A list for BES Admin's to discuss issues, etc. Subject: Re: [Bes-admins] PreventpersonalBlackberries from accessing companyemail I wish there was a consolidated resource that accounted for the various iterations/possibilities that need to be considered/configured to prevent unauthorized third party access to BES (be it device, application or service). Is there such a beast? Food for thought... Displaced and/or rogue information on an unmanaged device is a disaster waiting to happen... Untold liabilities are but a mere subpoena/discovery request away... Clouse, James A. From: [email protected] [mailto:[email protected]] On Behalf Of Eggan, Mark Sent: Tuesday, July 20, 2010 1:46 PM To: A list for BES Admin's to discuss issues,etc. Subject: Re: [Bes-admins] PreventpersonalBlackberries from accessing companyemail The ONLY way is by users' hardcoding username/password combos on BBs. This is a complete security meltdown. My CIO is melting in his chair now while hearing the words in this thread. It basically comes down to policy. Not only is it a security issue for corporate data and such, you also can't control the password lockout on personal devices (not connected to the BES). No Corporate policy on the BB, no BB access. That's the credo we are forced to enforce! We went through this about two years ago when people started configuring OWA on their iPhones. Now we have to start blocking GMAILs Google Calendar as people have figured out that they can access their calendar on their iPhones by configuring Google Calendar and forwarding. The security implications are so frustrating! Thank you, Mark x8142 P Please consider your environmental responsibility before printing this e-mail From: [email protected] [mailto:[email protected]] On Behalf Of Darhl Thomason Sent: Tuesday, July 20, 2010 10:34 AM To: 'A list for BES Admin's to discuss issues, etc.' Subject: Re: [Bes-admins] Prevent personalBlackberries from accessing companyemail It's policy that no personal handheld devices can access email. In principle I agree with you on why not BB OWA if PC OWA is OK, but I still get to enforce the policy. Darhl Thomason | SysAdmin | Business Technology Papa Murphy's Int'l. | d 360-449-4044 | c 360-607-5617 | <http://www.papamurphys.com> www.papamurphys.com From: [email protected] [mailto:[email protected]] On Behalf Of Jonathan Barker Sent: Tuesday, July 20, 2010 10:29 AM To: A list for BES Admin's to discuss issues, etc. Subject: Re: [Bes-admins] Prevent personal Blackberries from accessing companyemail If they have OWA access then what is the harm in OWA access on their personal blackberry? From: [email protected] [mailto:[email protected]] On Behalf Of Darhl Thomason Sent: Tuesday, July 20, 2010 10:09 AM To: [email protected] Subject: Re: [Bes-admins] Prevent personal Blackberries from accessing companyemail Ugh! Is there any way to prevent BIS from accessing corporate email? I set up a test account and it looks like it is accessing via OWA, but I cannot turn off OWA as that is the main method our stores use to get email. Darhl Thomason | SysAdmin | Business Technology Papa Murphy's Int'l. | d 360-449-4044 | c 360-607-5617 | <http://www.papamurphys.com> www.papamurphys.com From: [email protected] [mailto:[email protected]] On Behalf Of Eggan, Mark Sent: Tuesday, July 20, 2010 10:07 AM To: [email protected] Subject: Re: [Bes-admins] Prevent personal Blackberries from accessing companyemail You are correct, it would be BIS - configured at the store they purchased the phone from. I was at Verizon the other day and this is the conversation that I heard. TECH: Sure, you don't need the $45 dollar (data) plan, just get the $30 buck one and Ill show you how to access your company email. USER: Sweet, here is my username and password. . le sigh. Thank you, Mark x8142 P Please consider your environmental responsibility before printing this e-mail From: [email protected] [mailto:[email protected]] On Behalf Of Darhl Thomason Sent: Tuesday, July 20, 2010 9:55 AM To: '[email protected]' Subject: [Bes-admins] Prevent personal Blackberries from accessing companyemail I just found out that we have people with personal Blackberries accessing their company email, they are definitely not set up on my BES, so I'm guessing they must be using BIS. How can I prevent them from accessing their company email on their personal devices? I know it's not via IMAP or POP3, we have that turned off at the Exchange level. Thanks! Darhl Thomason | SysAdmin | Business Technology Papa Murphy's Int'l. | d 360-449-4044 | c 360-607-5617 | <http://www.papamurphys.com> www.papamurphys.com ------------------------------------------------------------------------------------ Consumer-voted "Best Pizza Chain in America" 2003-2009 ------------------------------------------------------------------------------------ Consumer-voted "Best Pizza Chain in America" 2003-2009 ------------------------------------------------------------------------------------ Consumer-voted "Best Pizza Chain in America" 2003-2009
_______________________________________________ Bes-Admins mailing list [email protected] http://www.dataoutages.com/mailman/listinfo/bes-admins http://www.dataoutages.com http://www.dataoutagenews.com RSS Feed: http://feeds.feedburner.com/Bes-admins --------------------------------- Bes-Admins mailing list is sponsored by Dataoutagenews.com. http://www.dataoutagenews.com
