BlackBerry Forums Support Community               

Closed Thread
 
LinkBack Thread Tools
Old 05-29-2009, 08:37 AM   #1 (permalink)
pej
Thumbs Must Hurt
 
Join Date: Jul 2005
Location: MN
Model: 8900
Carrier: T-Mobile
Posts: 69
Post Thanks: 1
Thanked 0 Times in 0 Posts
Default Device wipe - controlled at the BES or in the cloud?

Please Login to Remove!

When I send a Remote Wipe from our BES (Domino 4.1.6), does it get queued to the device in RIM's "cloud", or is the BES responsible for delivery of the command? Is there some "time out" on a queued Remote Wipe?

We have what I'm guessing is a common scenario -- user "X" is leaving the company in a week. Our policy says that before you leave, we wipe your BlackBerry. We try to work with the user to arrange a good time to wipe their device. Then one of many things happens:

- oops, they left LAST week, manager forgot to update HR. Our BES hasn't seen their device for more than a week...
- oops, they canceled the BES service on their account already...
- oops, they've been winding down their job for the past month anyway and haven't had their device on-air...

If we send a Remote Wipe from the BES in either of these cases, will the device receive the wipe when it comes back on-air, or if it happens to get connected to a new BES somewhere else? Or are we SOL, as is the user if they don't like our IT Policy in their new life?
If we send the Wipe and then remove the user from our BES, does the Wipe command remained queued with RIM?

The Technical document on what happens during a Wipe doesn't address these scenarios....
Offline  
Old 05-31-2009, 08:26 PM   #2 (permalink)
x14
BlackBerry Extraordinaire
 
Join Date: Jul 2005
Location: NYC
Model: 9800
OS: 6.0.0.546
Carrier: AT&T
Posts: 2,344
Post Thanks: 0
Thanked 17 Times in 16 Posts
Default

The wipe command would have the same lifespan as any message on the RIM network which is 7 days.

We face the same issue which is why we're playing with the IT Policy "Secure Wipe Delay After IT Policy Received". The idea is we set the value for 30 days and we resend the policy every week. If the BlackBerry doesn't get a policy in 30 days it would automatically wipe itself.
__________________
Exchange 2007/BES 5.0.2 MR2
Offline  
Old 06-01-2009, 10:03 PM   #3 (permalink)
BlackBerry Genius
 
hdawg's Avatar
 
Join Date: Aug 2006
Model: hdawg
PIN: port3101.org
Carrier: hdawg
Posts: 6,631
Post Thanks: 0
Thanked 0 Times in 0 Posts
Default

what ^ said. Its an aggressive approach to some, but makes perfect sense from a security standpoint.
Offline  
Old 06-01-2009, 10:49 PM   #4 (permalink)
BlackBerry Elite
 
knottyrope's Avatar
 
Join Date: Jan 2008
Location: Massachusetts
Model: Z30
OS: 10.2.1
PIN: t of blood has been taken
Carrier: AT&T-US with I dee ten tee errors
Posts: 6,564
Post Thanks: 256
Thanked 260 Times in 246 Posts
Default

That is an interesting concept to impliment.
I will have to chat with the powers to be for it.
__________________
irony : many old timer posters have de-evolved into the trolls they once fought
I am on http://supportforums.blackberry.com
BES 10 running sweet for my Z30, Z10 and Q10
Offline  
Old 06-02-2009, 02:30 AM   #5 (permalink)
Talking BlackBerry Encyclopedia
 
DavidAdams's Avatar
 
Join Date: Sep 2007
Location: Belfast
Model: NotYe
PIN: N/A
Carrier: O2
Posts: 470
Post Thanks: 2
Thanked 0 Times in 0 Posts
Default

Quote:
Originally Posted by x14 View Post
The wipe command would have the same lifespan as any message on the RIM network which is 7 days.

We face the same issue which is why we're playing with the IT Policy "Secure Wipe Delay After IT Policy Received". The idea is we set the value for 30 days and we resend the policy every week. If the BlackBerry doesn't get a policy in 30 days it would automatically wipe itself.
I am assuming that a "lost and then found" BB would maintain this policy until wiped with JL_Cmdr. Would annoy someone trying to use it that shouldn't be.
__________________
BES, 4.1.7, was SBE now full BES
Domino v7.0.2
Windows Server 2003, standalone
Offline  
Old 06-02-2009, 07:42 AM   #6 (permalink)
BlackBerry Genius
 
hdawg's Avatar
 
Join Date: Aug 2006
Model: hdawg
PIN: port3101.org
Carrier: hdawg
Posts: 6,631
Post Thanks: 0
Thanked 0 Times in 0 Posts
Default

Quote:
Originally Posted by DavidAdams View Post
I am assuming that a "lost and then found" BB would maintain this policy until wiped with JL_Cmdr. Would annoy someone trying to use it that shouldn't be.
Correct, as the minimum requirement is HH OS 4.2 for this to be supported on a HH this policy would stay in effect until removed with Java Loader ... unless the OS was 4.2.2 or newer and also had the IT Policy setting Remote Wipe Reset to Factory Defaults IT policy rule
Offline  
Old 06-02-2009, 09:43 AM   #7 (permalink)
BlackBerry Extraordinaire
 
kirrinjones's Avatar
 
Join Date: Apr 2006
Location: Jamaica
Model: 9000
OS: 5.0.0.610
PIN: 208E7C41
Carrier: LIME, Jamaica
Posts: 1,533
Post Thanks: 0
Thanked 0 Times in 0 Posts
Default

I think I will do a bit of research on the policy that x14 has. I like it and it covers all the scenarios that pej is concerned about.
Offline  
Old 06-08-2009, 08:10 AM   #8 (permalink)
BlackBerry Extraordinaire
 
Frank Castle's Avatar
 
Join Date: Jul 2005
Location: MA
Model: 9930
PIN: PM Me!
Carrier: VZW
Posts: 1,073
Post Thanks: 0
Thanked 4 Times in 3 Posts
Default

Been away but wanted to follow up if anyone else have this policy enabled like X14

Secure Wipe Delay After IT Policy Received

I would think it could cause more work then it's worth as 30 days isn't that long, I'd love 60 days. It does have appeal thought and some comfort knowing if the device isn't used it's erased.

Also for those that do have this enabled - what is your IT Policy resend interval? Is 24hrs too much load on the BES, any impact to the users?

Last edited by Frank Castle : 06-08-2009 at 08:23 AM.
Offline  
Closed Thread


Thread Tools

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On





Copyright 2004-2014 BlackBerryForums.com.
The names RIM and BlackBerry are registered Trademarks of BlackBerry Inc.