BlackBerry Forums Support Community               

Closed Thread
 
LinkBack Thread Tools
Old 03-01-2005, 01:31 PM   #1 (permalink)
Knows Where the Search Button Is
 
Join Date: Jan 2005
Posts: 26
Post Thanks: 0
Thanked 0 Times in 0 Posts
Default Secure way to only give MDS access with BES?

Please Login to Remove!

We have some consultats working for us that have blackberrys and we want to give them access to MDS only. We do not want to allow them to be able to get company e-mails and or send e-mails using the companies address.

When activating a black berry on a BES server using your handheld, you enter in your e-mail address and activation password. But after they do this, can we disable them from being able to use our companies e-mail address?
We want them to be able to use the browser and other products like verichat but not our e-mail. But we want them to be able to use the webclient part so they can still recieve there e-mails to there handhelds....

Whats the best way to do this?


Thanks in advance for any help...
Offline  
Old 03-01-2005, 04:21 PM   #2 (permalink)
BBF Moderator
 
acnst's Avatar
 
Join Date: Aug 2004
Location: Germany
Model: 9700
PIN: not configured
Carrier: T-Mobile
Posts: 1,527
Post Thanks: 0
Thanked 0 Times in 0 Posts
Default

What kind of email system are you using? As far as I remember e.g. MS Exchange allows you to disable sending and receiving emails. This should be possible with other groupware software too.
__________________
Deutsches Blackberry Forum - visit www.blackberry-forum.de


for Microsoft Exchange

Offline  
Old 03-01-2005, 06:02 PM   #3 (permalink)
Knows Where the Search Button Is
 
Join Date: Jan 2005
Posts: 26
Post Thanks: 0
Thanked 0 Times in 0 Posts
Default

running microsoft exchange 2k3...

is there any options in the blackberry server?

what other risks will we be taking by allowing them to access MDS through our BES?
Offline  
Old 03-02-2005, 05:50 AM   #4 (permalink)
Knows Where the Search Button Is
 
Join Date: Feb 2005
Location: Ireland
Posts: 16
Post Thanks: 0
Thanked 0 Times in 0 Posts
Default

Just tried this on our BES (V3.6) and it does seem to work. You'll still have to have exchange mailboxes for them though.

Add them in as normal users and then right click on the name. Disable redirection and Enable MDS.

You should be able to put additional protections on the mailboxes through exchange. I've only tested this briefly so I can't stand over it, only say that it's possible.

As for making MDS available, bear in mind that if your BES is not in a DMZ configuration (which, as it's not supported, I'm assuming it isn't! ) then in theory, they can use the browser service to get to any web enabled server on your LAN.

They'd need the IP or address of the server and presumably an appropriate login, but it can be done. This was one of our main reasons for switching MDS off while we examined the security features in more detail.

To be honest, I'd be extremely wary of doing this unless you have no other option.

Hope this is of some help.
__________________
The thread killer apparently :s
Offline  
Old 03-02-2005, 07:08 AM   #5 (permalink)
BBF Veteran User
 
Join Date: Aug 2004
Location: Hotwiring another Cessna
Model: OU812
Carrier: Nintendo
Posts: 3,492
Post Thanks: 0
Thanked 0 Times in 0 Posts
Default

I believe you can also setup MDS properties in IT Policies. As far as restricting browser access, restricting access to the internal/external network, etc...
Offline  
Closed Thread


Thread Tools

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On





Copyright 2004-2014 BlackBerryForums.com.
The names RIM and BlackBerry are registered Trademarks of BlackBerry Inc.