[lithanwif]

I hope someone can throw me a pointer here :

medium sized business, running BES, we've disabled wi-fi for all users on Blackberry through policy due to the security risks. I was wondering, and searching everywhere, if theres a way to set wi-fi NOT to connect to open networks?we still want it to be able to connect to WEP/WPA....

[Dubdub]

Moved to a more appropriate section

[BigA]

Could you please explain the security risks?? Even if the wifi is open, the traffic between the device an your BES is encrypted from the start. You don't really need to encrypt the wifi traffic to protect your sensitive corporate data.

[lithanwif]

As I understand it, Email etc is encrypted, but browsing wont be? And of course our drachonian policies will not allow anything to take place without some form of security, so Wi-Fi is a no go.

[penguin3107]

Lock down the browsers on the handheld so that all browsing traffic is funneled through BES MDS-CS.

[knottyrope]

Originally Posted by penguin3107

Lock down the browsers on the handheld so that all browsing traffic is funneled through BES MDS-CS.

Agreed.

we have had quite a few users that have had their personal email accounts hacked from open wifi on their personal computers.

unfortunate for us, they have a few work email addresses saved and they think its my problem to deal with LOL.

[BigA]

Originally Posted by lithanwif

As I understand it, Email etc is encrypted, but browsing wont be? And of course our drachonian policies will not allow anything to take place without some form of security, so Wi-Fi is a no go.

So just exactly what type of sensitive browsing are your users going to do? Most of the un-encrypted web browsing on our BB are users checking sports scores or checking the news. Most if not all users of browsing the mobile web on their devices are not browsing critical data that could be used against them. Even if they are browsing sensitive data like checking your bank account balances are encrypted at the session between the server an device. Heck even facebook is now encrypted. https://www.facebook.com and https://m.facebook.com/

[knottyrope]

facebook has been encrypted so users on open wifi cant have their plain text passwords stolen any more


also many people use the same password for everything, so once they steal it

ALL YOUR BASE ARE BELONG TO US!