BlackBerry Forums Support Community               

Closed Thread
 
LinkBack Thread Tools
Old 03-01-2005, 02:31 PM   #1 (permalink)
Knows Where the Search Button Is
 
Join Date: Jan 2005
Posts: 26
Post Thanks: 0
Thanked 0 Times in 0 Posts
Default Secure way to only give MDS access with BES?

Please Login to Remove!

We have some consultats working for us that have blackberrys and we want to give them access to MDS only. We do not want to allow them to be able to get company e-mails and or send e-mails using the companies address.

When activating a black berry on a BES server using your handheld, you enter in your e-mail address and activation password. But after they do this, can we disable them from being able to use our companies e-mail address?
We want them to be able to use the browser and other products like verichat but not our e-mail. But we want them to be able to use the webclient part so they can still recieve there e-mails to there handhelds....

Whats the best way to do this?


Thanks in advance for any help...
Offline  
Old 03-01-2005, 05:21 PM   #2 (permalink)
BBF Moderator
 
acnst's Avatar
 
Join Date: Aug 2004
Location: Germany
Model: 9700
PIN: not configured
Carrier: T-Mobile
Posts: 1,528
Post Thanks: 0
Thanked 0 Times in 0 Posts
Default

What kind of email system are you using? As far as I remember e.g. MS Exchange allows you to disable sending and receiving emails. This should be possible with other groupware software too.
__________________
Deutsches Blackberry Forum - visit www.blackberry-forum.de


for Microsoft Exchange

Offline  
Old 03-01-2005, 07:02 PM   #3 (permalink)
Knows Where the Search Button Is
 
Join Date: Jan 2005
Posts: 26
Post Thanks: 0
Thanked 0 Times in 0 Posts
Default

running microsoft exchange 2k3...

is there any options in the blackberry server?

what other risks will we be taking by allowing them to access MDS through our BES?
Offline  
Old 03-02-2005, 06:50 AM   #4 (permalink)
Knows Where the Search Button Is
 
Join Date: Feb 2005
Location: Ireland
Posts: 16
Post Thanks: 0
Thanked 0 Times in 0 Posts
Default

Just tried this on our BES (V3.6) and it does seem to work. You'll still have to have exchange mailboxes for them though.

Add them in as normal users and then right click on the name. Disable redirection and Enable MDS.

You should be able to put additional protections on the mailboxes through exchange. I've only tested this briefly so I can't stand over it, only say that it's possible.

As for making MDS available, bear in mind that if your BES is not in a DMZ configuration (which, as it's not supported, I'm assuming it isn't! ) then in theory, they can use the browser service to get to any web enabled server on your LAN.

They'd need the IP or address of the server and presumably an appropriate login, but it can be done. This was one of our main reasons for switching MDS off while we examined the security features in more detail.

To be honest, I'd be extremely wary of doing this unless you have no other option.

Hope this is of some help.
__________________
The thread killer apparently :s
Offline  
Old 03-02-2005, 08:08 AM   #5 (permalink)
BBF Veteran User
 
Join Date: Aug 2004
Location: Hotwiring another Cessna
Model: OU812
Carrier: Nintendo
Posts: 3,492
Post Thanks: 0
Thanked 0 Times in 0 Posts
Default

I believe you can also setup MDS properties in IT Policies. As far as restricting browser access, restricting access to the internal/external network, etc...
Offline  
Closed Thread


Thread Tools

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On

NEW SUPERMICRO SERVER BOARD PN X6DVA-4G MOTHERBOARD
$34.99
NEW SUPERMICRO  SERVER BOARD PN X6DVA-4G MOTHERBOARD pictureFANUC A16B-2203-0190 / 03A MAIN PC DEVICENET MOTHERBOARD
$170.0
FANUC A16B-2203-0190 / 03A MAIN PC DEVICENET MOTHERBOARD picture20PCS 4v 680uf FL Motherboard Electrolytic Capacitor 8x9mm
$4.5
20PCS 4v 680uf  FL Motherboard  Electrolytic Capacitor 8x9mm pictureDMP XR200 Security Alarm Mainboard Motherboard Panel W/ Dialer Board NIB
$99.99
DMP XR200 Security Alarm Mainboard Motherboard Panel W/ Dialer Board NIB pictureWestell Mother Board 12FT08900730 Mother Board 080-000164 NEW
$29.75
Westell Mother Board 12FT08900730 Mother Board 080-000164 NEW picture






Copyright 2004-2016 BlackBerryForums.com.
The names RIM and BlackBerry are registered Trademarks of BlackBerry Inc.