BlackBerry Forums Support Community               

Closed Thread
 
LinkBack Thread Tools
Old 12-11-2008, 06:14 PM   #1 (permalink)
New Member
 
Join Date: Dec 2008
Model: 8830
PIN: N/A
Carrier: bell
Posts: 1
Post Thanks: 0
Thanked 0 Times in 0 Posts
Default auditing Blackberry messenger messages

Please Login to Remove!

hi,

I'm a BES Admin for my companies, and i would like to know how can we monitor blackberry messenger messages coming in and going out.

we have had a few company information leeks.
can you please tell me how we can audit PIN, SMS and blackberry messenger messages.

please let me know, i would really like to know

regards
Offline  
Old 12-31-2008, 02:07 PM   #2 (permalink)
New Member
 
Join Date: Dec 2008
Model: 9500
PIN: N/A
Carrier: Verizon
Posts: 7
Post Thanks: 0
Thanked 0 Times in 0 Posts
Default mixed answers

There is a lot of confusion over this issue. BES 4.1 will allow for auditing of PIN and SMS messages including the content to the .csv log files on the server which the administer can read.

However, it is my understanding that while Blackberry Messenger is a form of PIN to PIN, these messages are NOT saved to the PIN .csv log file.

I further understand that the only way to log Blackberry Messenger messages is to set BES up for an individual users Blackberry to send an email copy of the BB message which will result in the user being able to see the email containing their messages in their sent items.

Can any of the people that have discussed this in the past weigh in on whether this is correct or not?

thx
Offline  
Old 12-31-2008, 02:30 PM   #3 (permalink)
BlackBerry Mensa
 
tsac's Avatar
 
Join Date: Mar 2005
Location: Others run out when we run in
Model: Z10
OS: 10.010219
PIN: No Pin just a Tack
Carrier: at&t
Posts: 8,339
Post Thanks: 43
Thanked 588 Times in 581 Posts
Default

If your using a BES you should be monitoring the email system such as Outlook.
Just be very careful you have the proper notifications in place to anyone using email otherwise your open to a lawsuit. Once notifyed you're being monitored, your free to do so. Just be sure your management backs your intent in WRITING


Welcome to the forums
__________________
If someone helps, tell them by clicking the Thanks button


9810 BES
Z10 on BES
9700 BIS
Offline  
Old 12-31-2008, 02:53 PM   #4 (permalink)
BlackBerryForums.com Super Moderator
 
SteveO86's Avatar
 
Join Date: Sep 2007
Location: Florida
Model: 9650
OS: 6.0.0.280
PIN: I heard it drop!
Carrier: VZW BIS
Posts: 6,534
Post Thanks: 0
Thanked 4 Times in 1 Post
Default

What tsac said.

I also want to add the following, to log that info from the BES you should enforce it via IT policy, in the IT policy go to the PIM synch group and make sure the disable SMS, PIN wireless sync is disabled/set to false, the logs should be kept in the "C:\Program Files\Research In Motion\BlackBerry Enterprise Server\Logs\%date%" directory (if you modified the installation that path will be different). By default only the phone call logs are logged on the BES.
__________________
8830 -> 8330 -> 9550 -> 9650
Just think about how far BlackBerries have come from then till now... And what else is coming.

Follow me on Twitter
Offline  
Old 12-31-2008, 04:29 PM   #5 (permalink)
New Member
 
Join Date: Dec 2008
Model: 9500
PIN: N/A
Carrier: Verizon
Posts: 7
Post Thanks: 0
Thanked 0 Times in 0 Posts
Default

OK, good points. But what about the ability to audit Blackberry Messenger messages? Aside from the emailing of a specific user from their device?
Offline  
Old 01-01-2009, 12:26 AM   #6 (permalink)
BlackBerryForums.com Super Moderator
 
SteveO86's Avatar
 
Join Date: Sep 2007
Location: Florida
Model: 9650
OS: 6.0.0.280
PIN: I heard it drop!
Carrier: VZW BIS
Posts: 6,534
Post Thanks: 0
Thanked 4 Times in 1 Post
Default

Quote:
Originally Posted by johnnytwotoes View Post
OK, good points. But what about the ability to audit Blackberry Messenger messages? Aside from the emailing of a specific user from their device?
Maybe because it's getting late but I'm not sure what you mean by that.

(My other post mentions enabling the auditing of the BBM mesages threw an IT Policy, all the messages via the BBM is logged in a log in the directory I mentioned above if the defaults were used during installation.)
__________________
8830 -> 8330 -> 9550 -> 9650
Just think about how far BlackBerries have come from then till now... And what else is coming.

Follow me on Twitter
Offline  
Old 01-01-2009, 12:31 PM   #7 (permalink)
New Member
 
Join Date: Dec 2008
Model: 9500
PIN: N/A
Carrier: Verizon
Posts: 7
Post Thanks: 0
Thanked 0 Times in 0 Posts
Default

BES 4.1 will log all SMS and PIN messages when enabled but I understand that it does not log Blackberry Messenger content.

I understand that you can set a device to email Messenger content on a periodic basis but this is visible to the user through their sent items folder.

Can anyone confirm my understanding on this?
Offline  
Old 01-14-2009, 11:11 AM   #8 (permalink)
New Member
 
Join Date: Jan 2009
Model: 9000
PIN: N/A
Carrier: Rogers
Posts: 1
Post Thanks: 0
Thanked 0 Times in 0 Posts
Default auditing Blackberry messenger messages

tnthunder..

You can only log BBM thru setting up an IT policy and having messages emailed to someone (BES Admin). But please understand that the audited message will only contain the portion of the message written by the user who has the IT policy applied, If they are messaging with someone outside your control (IT policy) then you will only see half the message.

As for PIN and SMS these you can have saved to a log file. Check out the following procedure.

BlackBerry Enterprise Server software version 4.1 can log personal identification number (PIN) messages and Short Message Service (SMS) messages that have been sent and received on a BlackBerry device. These logs are then kept in a central repository. By default, only phone call logging is turned on.

To modify the settings for either of these features, complete the following steps:
In BlackBerry Manager, in the left pane, select the BlackBerry Enterprise Server you want to modify.
Select the Server Configuration tab, and click Edit Properties.
Click Sync Server.
Double-click Audit Root Directory.
If you want to save the log files, type the path to the location where you would like to save the files and click OK.
In the left pane, click BlackBerry Domain.
Select the Global tab and click Edit Properties.
Click IT Policy.
In the IT Policy Administration section, double-click IT Policies.
Select one of the policies in the list.
Click Properties > PIM Sync Policy Group.
To monitor SMS or PIN messages, complete the steps in the table below:
Monitor the SMS messages BlackBerry device users send and receive from BlackBerry devices.
Click Disable SMS Messages Wireless Sync.
In the drop-down list, select False.
Monitor the PIN messages BlackBerry device users send and receive from BlackBerry devices.
Click Disable PIN Messages Wireless Sync.
In the drop-down list, select False.
Click OK to close the open windows.
Restart the BlackBerry Synchronization Service. The BlackBerry Enterprise Server creates the log files using the following formats:
PIN messages: PINLog_<YYYYMMDD>.csv
SMS messages: SMSLog_<YYYYMMDD>.csv
Phone calls: PhoneCallLog_<YYYYMMDD>.csv


If any of my info is incorrect please feel free to correct me..always learning
Offline  
Old 05-15-2009, 11:28 AM   #9 (permalink)
New Member
 
Join Date: May 2009
Model: 7100T
PIN: N/A
Carrier: ATT
Posts: 1
Post Thanks: 0
Thanked 0 Times in 0 Posts
Default auditing Blackberry messenger messages

What information is contained in the audit file? Does it contain images and files sent or just the names?
Offline  
Old 05-15-2009, 01:07 PM   #10 (permalink)
iPhone Convert
 
juwaack68's Avatar
 
Join Date: Oct 2005
Location: Tulip City - MI
Model: iP5
OS: 6.0.2
PIN: to beans
Carrier: I'm not
Posts: 13,875
Post Thanks: 3
Thanked 72 Times in 55 Posts
Default

I believe the audit file contains PIN/Names and text.

It just baffles me that RIM can [easily and behind the scenes] audit/log the content of SMS messages (which travel over the carriers voice network), but not messages using software that they wrote!
__________________
No longer a BES Admin, but it was fun while it lasted!
Offline  
Old 05-15-2009, 01:40 PM   #11 (permalink)
BlackBerry Extraordinaire
 
Frank Castle's Avatar
 
Join Date: Jul 2005
Location: MA
Model: 9930
PIN: PM Me!
Carrier: VZW
Posts: 1,073
Post Thanks: 0
Thanked 4 Times in 3 Posts
Default Audit

Considering I have a number to compliance needs we started auditing BB last year and in fact the BB Messenger is logged and stored within the PIN log.

If this is an area you need I highly suggest looking into a 3rd party tool to better review as the logs are just ugly and a PITA to deal with for discovery.

Gwava
CommonDesk
Facetime

All have very robust solutions that should meet any compliance guidelines you have.
Offline  
Old 05-15-2009, 01:42 PM   #12 (permalink)
Whoever
 
audit's Avatar
 
Join Date: Apr 2005
Location: Michigan
Model: xxxx
Carrier: AT&T
Posts: 1,218
Post Thanks: 37
Thanked 0 Times in 0 Posts
Default

Quote:
Originally Posted by juwaack68 View Post
I believe the audit file contains PIN/Names and text.
Oh I contain MUCH more then that
__________________
audit

Win or Lose... Everyone Has Their Fight
Offline  
Old 05-15-2009, 01:56 PM   #13 (permalink)
BBF War Game Mod
 
Jadey's Avatar
 
Join Date: Oct 2006
Location: Denver CO
Model: Z10
OS: 10010614
PIN: SEEKRIT innit
Carrier: AT&T
Posts: 4,294
Post Thanks: 9
Thanked 29 Times in 23 Posts
Default

Quote:
Originally Posted by jletendre View Post
Considering I have a number to compliance needs we started auditing BB last year and in fact the BB Messenger is logged and stored within the PIN log.
Really? What data exactly?
I know that when adding BBM contacts the handshake is stored in the PIN log, but I didn't think ANY chat data was.

Would be curious for more info on this. I thought this was still the state of play How do I log BB Messenger conversations?
__________________
Jadey : Groupware Infrastructure Architect, Denver CO
If I'm not here, I'm playing World's End on FaceBook. Mob/Mafia Wars are SOO last year
Offline  
Old 05-15-2009, 02:02 PM   #14 (permalink)
BlackBerry Extraordinaire
 
Frank Castle's Avatar
 
Join Date: Jul 2005
Location: MA
Model: 9930
PIN: PM Me!
Carrier: VZW
Posts: 1,073
Post Thanks: 0
Thanked 4 Times in 3 Posts
Default

Ok this is what I see (edited)

"last name, first","PIN","email address","Outgoing","PIN","","","Last,First PIN","<$RemoveOnDelivery,SuppressSaveInSentItems> BLACKBERRYMESSENGERINVITESTAGE2","-----xxx65532;----

So you are right .. it doesn't list the message.
Offline  
Closed Thread


Thread Tools

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On





Copyright 2004-2014 BlackBerryForums.com.
The names RIM and BlackBerry are registered Trademarks of BlackBerry Inc.