BlackBerry Forums Support Community               

Closed Thread
 
LinkBack Thread Tools
Old 09-27-2012, 12:40 PM   #1 (permalink)
Thumbs Must Hurt
 
Join Date: Mar 2005
Model: 7520
Carrier: Nextel
Posts: 75
Post Thanks: 0
Thanked 0 Times in 0 Posts
Default BES App Whitelists = Not Really

Please Login to Remove!

I've spent sometime researching how to implement whitelists in BES 5.x, and it seems that it really isn't implementable in a normal whitelist way.

Requirements:
- Provide a list of applications that users are allowed to run/install.
- Block all other apps.

=====
Possible Solution One: Use App control policies and set unlisted apps to "unallowed" and publish allowed apps, listed with 'optional"

Why this doesn't work: If you wish to allow users to install 200 approved apps, but not force it on them to install them....this is not the way to go. Apparently eventhough the app is listed as "optional" it still attempts to push the app to the device. The optional part just means they can delete it, or possibly skip it on a prompt.
========
Possible Solution Two: App world "Application restriction List" which is a txt string of allowed ID's to be installed on the device.

Why this won't work: (a)Users would still be able to sideload apps, (b) not all apps appear in appworld (like googlemaps) so if you could lock it down to appworld, you may be losing a lot of necessary apps.
=========

Are there any solutions you guys have implemented for optional whitelist apps (and blacklist all others)? Or am I incorrect in the above items.

thanks.
Offline  
Old 09-28-2012, 12:07 PM   #2 (permalink)
BlackBerry Extraordinaire
 
Join Date: Mar 2007
Model: Z10
OS: 10.1.0.19
Carrier: Fido
Posts: 1,068
Post Thanks: 6
Thanked 30 Times in 29 Posts
Default Re: BES App Whitelists = Not Really

try solution 2 along with:
Security>Application Installation Methods:

Disallow Browser
Disallow Media Card
Disallow USB

That may get you where you want or almost there. What you want works well in BDS though...
Offline  
Old 09-28-2012, 07:08 PM   #3 (permalink)
Thumbs Must Hurt
 
Join Date: Mar 2005
Model: 7520
Carrier: Nextel
Posts: 75
Post Thanks: 0
Thanked 0 Times in 0 Posts
Default Re: BES App Whitelists = Not Really

Quote:
Originally Posted by fadmin View Post
try solution 2 along with:
Security>Application Installation Methods:

Disallow Browser
Disallow Media Card
Disallow USB

That may get you where you want or almost there. What you want works well in BDS though...
That sounded really promising for a moment. But after a bit of research it sounds like the "application installation methods" are only supported on 7.1 handhelds, which 90% of our users do not have.
Offline  
Old 10-01-2012, 08:41 AM   #4 (permalink)
BlackBerry Extraordinaire
 
Join Date: Mar 2007
Model: Z10
OS: 10.1.0.19
Carrier: Fido
Posts: 1,068
Post Thanks: 6
Thanked 30 Times in 29 Posts
Default Re: BES App Whitelists = Not Really

Probably that is the closest you'd get for the requirement you have. Was wandering if you want to make 200 apps optional you may as well let them install whatever they want. Another thing you may try is to create small internal website with all allowed apps and install it from there.
I know it does not help you but as I said they did get it right in BDS and will do what you want .
Offline  
Old 10-01-2012, 11:00 AM   #5 (permalink)
Thumbs Must Hurt
 
Join Date: Mar 2005
Model: 7520
Carrier: Nextel
Posts: 75
Post Thanks: 0
Thanked 0 Times in 0 Posts
Default Re: BES App Whitelists = Not Really

Quote:
Originally Posted by fadmin View Post
Probably that is the closest you'd get for the requirement you have. Was wandering if you want to make 200 apps optional you may as well let them install whatever they want. Another thing you may try is to create small internal website with all allowed apps and install it from there.
I know it does not help you but as I said they did get it right in BDS and will do what you want .
- The 200 number was, of course, just an example. It was to show how unacceptable RIM's software config 'whitelist' option is, because it tries to push the apps to the handhelds, rather than just allowing.
- How does "creating an internal site for allowed apps" prevent users from installing from other sources. Remember the point of this was to prevent users from installing any apps except x, y, z.
- You are correct, requiring BDS and the currently vaporware BB10 devices, and then requiring the entire company upgrade to these new devices so that this policy can be enforced, is not realistic.

It's always this type of seemingly simple security request that makes you think you are missing something when you can't figure out how to implement it.
Offline  
Old 10-02-2012, 04:10 AM   #6 (permalink)
BlackBerry Extraordinaire
 
Join Date: Mar 2006
Model: 9700
Carrier: t-mobile Germany
Posts: 1,362
Post Thanks: 11
Thanked 69 Times in 66 Posts
Default Re: BES App Whitelists = Not Really

Just an idea:
If you use the whitelist, but, remove the actual applications from the Server, and put them somewhere else where people could browse and then install the applications based on their individual needs ?
Offline  
Old 10-17-2012, 01:14 PM   #7 (permalink)
New Member
 
Join Date: Oct 2012
Location: Ontario, Canada
Model: Playb
PIN: N/A
Carrier: Rogers
Posts: 2
Post Thanks: 0
Thanked 0 Times in 0 Posts
Default Re: BES App Whitelists = Not Really

Another idea:

Use an Application Management tool like SystAG AppWorld.

Easy to set up approved apps, license management, device specific app deployments (and updates) - OTA too. Oh, and it also works for Android - iOS is coming soon.
Offline  
Closed Thread


Thread Tools

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On

Similar Threads for: BES App Whitelists = Not Really
Thread Thread Starter Forum Replies Last Post
Agent Crash Every hour or less GPITMAN BES Admin Corner 2 07-01-2010 01:14 AM
Blackberry App for Blackberry phone to manage BES GPITMAN General BlackBerry Discussion 1 01-23-2010 10:31 PM
BENCHMARK your BlackBerry speed! Add your results here! Mark Rejhon General BlackBerry Discussion 271 03-12-2007 09:51 PM
BES 4.01 migration to new server, do these steps look okay? mcast12 BES Admin Corner 0 08-22-2006 11:22 AM
Eval to Full BES 4.0 for Domino - Changing SRP Hatchy BES Admin Corner 0 01-17-2006 07:59 AM





Copyright 2004-2014 BlackBerryForums.com.
The names RIM and BlackBerry are registered Trademarks of BlackBerry Inc.