BlackBerry Forums Support Community
              

Closed Thread
 
Thread Tools
Old 12-12-2007, 03:13 PM   #1
bhsalzer
Thumbs Must Hurt
 
Join Date: Sep 2004
Location: Chicago, IL
Model: 8900
Carrier: T-Mobile
Posts: 139
Default BES Locked Down

Please Login to Remove!

Our company uses the BES server and has all our blackberries locked down the most restrictive way posible. We do not allow 3rd Party applications, personal emails, PIN messanging, or and MMS or SMS messanging. Yet a few users have been able to setup blackberry.net email addresses on their phones thru the carrier.

They have only been able to receive messages as of now. I have two questions.

1) Are we able to monitor those incoming emails that are addressed to [email address]?

2) Are there any possible work arounds that they will create that will allow them to start sending emails from that acct? currently if they receive an email it responds from their work email.
Offline  
Old 12-12-2007, 08:22 PM   #2
audit
Whoever
 
audit's Avatar
 
Join Date: Apr 2005
Location: Michigan
Model: xxxx
Carrier: AT&T
Posts: 1,219
Default

Quote:
Originally Posted by bhsalzer View Post
Our company uses the BES server and has all our blackberries locked down the most restrictive way posible.We do not allow 3rd Party applications, personal emails, PIN messanging, or and MMS or SMS messanging.
That's not even CLOSE to being locked down as restrictive as it can be. That looks like it's a little tighter then standard but it depends on the company policy.

Quote:
Yet a few users have been able to setup blackberry.net email addresses on their phones thru the carrier.

They have only been able to receive messages as of now. I have two questions.

1) Are we able to monitor those incoming emails that are addressed to [email address]?
No you can't monitor the incoming. You can force the emails to use the BES for outgoing and then they can be monitored
__________________
audit

Win or Lose... Everyone Has Their Fight
Offline  
Old 12-12-2007, 08:25 PM   #3
bhsalzer
Thumbs Must Hurt
 
Join Date: Sep 2004
Location: Chicago, IL
Model: 8900
Carrier: T-Mobile
Posts: 139
Default

Aren't the messages that are incomeing monitored since they are coming in essentially thru the BES.

How much more restrictive could it get?
__________________
Mobile Portal: http://thesalzers.com

Now: BB8900
Past: BB8320, BB8100, BB8700, BB7105, BB7100, BB7230, 2 Treos, 2 Sidekicks
Offline  
Old 12-12-2007, 09:45 PM   #4
fusky
Thumbs Must Hurt
 
Join Date: May 2007
Model: 8830
PIN: N/A
Carrier: Verizon
Posts: 73
Default

I believe you can disable BIS access in the IT Policy.

Properties -> Service Exclusivity Policy Group -> Allow Other Message Services -> False
__________________
Ex Novice BES Admin
Offline  
Old 12-12-2007, 10:15 PM   #5
juwaack68
iPhone Convert
 
juwaack68's Avatar
 
Join Date: Oct 2005
Location: Tulip City - MI
Model: iP5
OS: 6.0.2
PIN: to beans
Carrier: I'm not
Posts: 13,877
Default

Quote:
Originally Posted by bhsalzer View Post
Aren't the messages that are incomeing monitored since they are coming in essentially thru the BES.

How much more restrictive could it get?
No, they are not coming in thru BES, they are getting pushed via the BIS service. The only way they'd be able to monitor them is if you reply to the message, since it will then be sent AS your BES address.

More restrictive? You didn't mention a password but I bet you have one. Does it lock every 20 minutes, regardless of whether your using the device or not? Does it lock when you put the device in the holster? Will the device automatically wipe when the battery reaches 5-10% power left? Can you use the phone? If you can use the phone, are you allowed to use Bluetooth?

Yes, it can be locked down for all of the above items and more.

I do think your policy is pretty restrictive, compared to my company's, but it all depends on what you company's security policies are.
__________________
No longer a BES Admin, but it was fun while it lasted!
Offline  
Old 12-12-2007, 10:16 PM   #6
juwaack68
iPhone Convert
 
juwaack68's Avatar
 
Join Date: Oct 2005
Location: Tulip City - MI
Model: iP5
OS: 6.0.2
PIN: to beans
Carrier: I'm not
Posts: 13,877
Default

Quote:
Originally Posted by fusky View Post
I believe you can disable BIS access in the IT Policy.

Properties -> Service Exclusivity Policy Group -> Allow Other Message Services -> False
That policy will still allow people to receive BIS email, but forces ALL outgoing email thru the BES account. We use this one.
__________________
No longer a BES Admin, but it was fun while it lasted!
Offline  
Old 12-13-2007, 03:43 PM   #7
fusky
Thumbs Must Hurt
 
Join Date: May 2007
Model: 8830
PIN: N/A
Carrier: Verizon
Posts: 73
Default

Quote:
Originally Posted by juwaack68 View Post
That policy will still allow people to receive BIS email, but forces ALL outgoing email thru the BES account. We use this one.
Hmmm... Is there any way to disable BIS completely?
__________________
Ex Novice BES Admin
Offline  
Old 12-13-2007, 03:58 PM   #8
juwaack68
iPhone Convert
 
juwaack68's Avatar
 
Join Date: Oct 2005
Location: Tulip City - MI
Model: iP5
OS: 6.0.2
PIN: to beans
Carrier: I'm not
Posts: 13,877
Default

Quote:
Originally Posted by fusky View Post
Hmmm... Is there any way to disable BIS completely?
Nope....not yet anyway.
__________________
No longer a BES Admin, but it was fun while it lasted!
Offline  
Old 12-13-2007, 04:13 PM   #9
jibi
BlackBerry God
 
jibi's Avatar
 
Join Date: Oct 2004
Location: Jibi's Secret Place
Model: 8900
OS: 4.6.1.174
Carrier: AT&T
Posts: 11,310
Default

With future versions of BES (Argon and above, although future SPs for 4.1 may include this), you'll be able to disable various features and service books that are pushed from the carriers.
__________________
In the beginning the Universe was created. This has made a lot of people very angry and is widely regarded as a bad move.
Offline  
Old 12-13-2007, 04:25 PM   #10
penguin3107
BlackBerry God
 
penguin3107's Avatar
 
Join Date: Jan 2005
Model: iOS 5
Carrier: VZW
Posts: 11,701
Default

Quote:
Originally Posted by juwaack68 View Post
Nope....not yet anyway.
Depending on the handheld OS version, you can Block BIS messages using IT policy settings for firewall.

I believe if the handheld has at least OS 4.2, you can use the Firewall Block Incoming Messages policy to block BIS messages in addition to PIN, SMS and MMS.
__________________
BCSA
BES 5.0.3 MR4 :-: Exchange 2007 SP3 RU3
http://port3101.org
Offline  
Old 12-13-2007, 04:44 PM   #11
fusky
Thumbs Must Hurt
 
Join Date: May 2007
Model: 8830
PIN: N/A
Carrier: Verizon
Posts: 73
Default

Quote:
Originally Posted by penguin3107 View Post
Depending on the handheld OS version, you can Block BIS messages using IT policy settings for firewall.

I believe if the handheld has at least OS 4.2, you can use the Firewall Block Incoming Messages policy to block BIS messages in addition to PIN, SMS and MMS.
Interesting. Thanks.
__________________
Ex Novice BES Admin
Offline  
Old 12-14-2007, 02:39 PM   #12
bhsalzer
Thumbs Must Hurt
 
Join Date: Sep 2004
Location: Chicago, IL
Model: 8900
Carrier: T-Mobile
Posts: 139
Default

Quote:
Originally Posted by juwaack68 View Post
No, they are not coming in thru BES, they are getting pushed via the BIS service. The only way they'd be able to monitor them is if you reply to the message, since it will then be sent AS your BES address.

More restrictive? You didn't mention a password but I bet you have one. Does it lock every 20 minutes, regardless of whether your using the device or not? Does it lock when you put the device in the holster? Will the device automatically wipe when the battery reaches 5-10% power left? Can you use the phone? If you can use the phone, are you allowed to use Bluetooth?

Yes, it can be locked down for all of the above items and more.

I do think your policy is pretty restrictive, compared to my company's, but it all depends on what you company's security policies are.
YES, Yes, and Yes.....

Phone has a auto lock on all those features every 30 minutes but not when holstered. We do allow Bluetooth and never knew about the battery option. After having a FULL blown blackberry in the past for personal use, this is definitely a neutered version but it is still the most powerful tool ever.

The security is set so high due to working in the financial industry. All communication needs to be logged and stored forever in case there are issues.
__________________
Mobile Portal: http://thesalzers.com

Now: BB8900
Past: BB8320, BB8100, BB8700, BB7105, BB7100, BB7230, 2 Treos, 2 Sidekicks
Offline  
Closed Thread


Thread Tools

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump

Laura Ingalls Wilder Memorial Society Bonnet & Apron
$40.99
Laura Ingalls Wilder Memorial Society Bonnet & Apron picture1PCS Brand NEW Siemens 6ES7953-8LF00-0AA0 64KB memory card
$102.87
1PCS Brand NEW Siemens 6ES7953-8LF00-0AA0 64KB memory card picture1PCS Brand New SIEMENS memory 6GT2800-5BD00
$221.46
1PCS Brand New SIEMENS memory 6GT2800-5BD00 pictureNew Siemens MEMORY CARD 128K 6ES7 953-8LG30-0AA0
$78.85
New Siemens MEMORY CARD 128K 6ES7 953-8LG30-0AA0 pictureAUTO METER 4594 5in Ultra-Nite In Dash Memory Tach -
$399.88
AUTO METER 4594 5in Ultra-Nite In Dash Memory Tach -  picture






Copyright 2004-2016 BlackBerryForums.com.
The names RIM and BlackBerry are registered Trademarks of BlackBerry Inc.