BlackBerry Forums Support Community               

Closed Thread
 
LinkBack Thread Tools
Old 04-20-2009, 03:13 AM   #1 (permalink)
Thumbs Must Hurt
 
Join Date: Oct 2008
Model: 9780
OS: 6.0.0.359
PIN: N/A
Carrier: Telekom.de
Posts: 79
Post Thanks: 1
Thanked 0 Times in 0 Posts
Default Mass Storage Mode - Security Questions

Please Login to Remove!

If I allow Mass Storage Mode from the BES Server using the policy

1) Is there any way of auditing what files are transferred from a Blackberry to a PC using mass storage mode? Does anyone know any snoop software for this audit or is there a way of synching the blackberry event log files altlglg for this? Is there another log on the Blackberry that contains this onfo which can be synched with the BES server?

2) Is there any way of encrypting transfers to a particular PC- Blackberry connection for non media files? So to prevent people sending company info to a private PC or that of another company.

3) Do people know of any USB plug ins to Blackberry usb port which will allow audit or restrictions liek mentioned in 1) and 2)?

4) Is there any server based way of restricting what, where and how files can be transferred to and fro from the Blackberry?
Offline  
Old 04-20-2009, 05:22 AM   #2 (permalink)
BlackBerry God
 
penguin3107's Avatar
 
Join Date: Jan 2005
Model: iOS 5
Carrier: VZW
Posts: 11,701
Post Thanks: 1
Thanked 237 Times in 219 Posts
Default

Quote:
Originally Posted by MobileMind View Post
If I allow Mass Storage Mode from the BES Server using the policy

1) Is there any way of auditing what files are transferred from a Blackberry to a PC using mass storage mode? Does anyone know any snoop software for this audit or is there a way of synching the blackberry event log files altlglg for this? Is there another log on the Blackberry that contains this onfo which can be synched with the BES server?

2) Is there any way of encrypting transfers to a particular PC- Blackberry connection for non media files? So to prevent people sending company info to a private PC or that of another company.

3) Do people know of any USB plug ins to Blackberry usb port which will allow audit or restrictions liek mentioned in 1) and 2)?

4) Is there any server based way of restricting what, where and how files can be transferred to and fro from the Blackberry?
1) No. No. No.
2) Particular PC, meaning not all PCs? No.
3) No.
4) No.
__________________
BCSA
BES 5.0.3 MR4 :-: Exchange 2007 SP3 RU3
http://port3101.org
Offline  
Old 04-20-2009, 08:03 AM   #3 (permalink)
BlackBerry Extraordinaire
 
Frank Castle's Avatar
 
Join Date: Jul 2005
Location: MA
Model: 9930
PIN: PM Me!
Carrier: VZW
Posts: 1,073
Post Thanks: 0
Thanked 4 Times in 3 Posts
Default

Everything you outlined is nothing BES can provide you other then allowing mass storage mode or not and encrypting the files.

Look into Symantec Endpoint protection and other similar products to lock down usb. We recently went through a whole data leakage project and are using a combination of SEP and Guardian Edge.
Offline  
Old 05-12-2009, 02:51 AM   #4 (permalink)
Thumbs Must Hurt
 
Join Date: Oct 2008
Model: 9780
OS: 6.0.0.359
PIN: N/A
Carrier: Telekom.de
Posts: 79
Post Thanks: 1
Thanked 0 Times in 0 Posts
Default

Quote:
Originally Posted by jletendre View Post
Everything you outlined is nothing BES can provide you other then allowing mass storage mode or not and encrypting the files.

Look into Symantec Endpoint protection and other similar products to lock down usb. We recently went through a whole data leakage project and are using a combination of SEP and Guardian Edge.

What about this software that President Obama is using to secure his device. Is there software which allows data connections to be allowable only to specifed links and to PCs with the required software loaded on it. In this way people would only be able to use the Blackberry as a USB stick with Company PCs for instance where the software had been configured to allow for the link with their device.

Maybe I will just have to wait for more granular policies on the BES. At the moment the setting seems to be on or off as you say.

Last edited by MobileMind : 05-12-2009 at 02:52 AM.
Offline  
Old 05-12-2009, 07:32 AM   #5 (permalink)
BlackBerry Extraordinaire
 
Join Date: Aug 2008
Location: Basel
Model: 9780
PIN: N/A
Carrier: Swisscom
Posts: 1,579
Post Thanks: 5
Thanked 119 Times in 116 Posts
Default

USB mass storage access is either on or off. How would you - in pratical terms - restrict files that can be transferred? Based on file extension? So, disallow PDFs but allow MP3s? People could easily rename files.

If you don't trust your users, you should disable mass storage on the BB completely. But then, they can take any memory stick and copy files anyway.

Obama's software? Do you really think you will get that off the shelf?!?

Last edited by freakinvibe : 05-12-2009 at 07:52 AM.
Offline  
Old 05-12-2009, 07:50 AM   #6 (permalink)
BlackBerry God
 
penguin3107's Avatar
 
Join Date: Jan 2005
Model: iOS 5
Carrier: VZW
Posts: 11,701
Post Thanks: 1
Thanked 237 Times in 219 Posts
Default

Quote:
Originally Posted by freakinvibe View Post
Obama's software? Do you really thing you will get that off the shelf?!?
I'm sure you can get it Amazon.com. They have everything.
__________________
BCSA
BES 5.0.3 MR4 :-: Exchange 2007 SP3 RU3
http://port3101.org
Offline  
Closed Thread


Thread Tools

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On





Copyright 2004-2014 BlackBerryForums.com.
The names RIM and BlackBerry are registered Trademarks of BlackBerry Inc.