BlackBerry Forums Support Community               

Closed Thread
 
LinkBack Thread Tools
Old 02-19-2010, 04:28 PM   #1 (permalink)
New Member
 
Join Date: Feb 2010
Model: 8700g
PIN: N/A
Carrier: t-mobile
Posts: 3
Post Thanks: 0
Thanked 0 Times in 0 Posts
Default Block access Exchange email via OWA

Please Login to Remove!

Is there a proven way to block all Blackberry's that access Exchange 2007 via OWA? It is against my company policies to store password with 3rd party (BIS) as well as not having the ability to apply policies, remote wipe if lost, etc.

Now I know I could block all the BIS subnets at the Firewall but this could be problematic. We have users who use NotifyLink or AstraSync which works with Exchange's ActiveSync thereby allow our policies to be applied to protect the device. These applications however use the BIS network and blocking the BIS subnets at the FW would block these users as well (may have to go down this road anyway).

I can also put to rest implementing a BES as our company has decided against spending money which is not needed when so many devices have ActiveSync ability.

We are looking at allowing our users to pick the mobile device they like the best or are more comfortable with.

Thanks,

Jay
Offline  
Old 02-19-2010, 04:56 PM   #2 (permalink)
BlackBerry Extraordinaire
 
Join Date: Jan 2005
Model: Many
Carrier: Sprint
Posts: 1,475
Post Thanks: 0
Thanked 6 Times in 5 Posts
Default

Your company won't deploy a BES due to cost yet you pay for NotifyLink?
Offline  
Old 02-19-2010, 05:04 PM   #3 (permalink)
iPhone Convert
 
juwaack68's Avatar
 
Join Date: Oct 2005
Location: Tulip City - MI
Model: iP5
OS: 6.0.2
PIN: to beans
Carrier: I'm not
Posts: 13,875
Post Thanks: 3
Thanked 72 Times in 55 Posts
Default

There is a way to do it - I remember seeing a RIM KB article on it. You have to block a range of RIM's IP addresses to do it.

Seeing if I can find it.
__________________
No longer a BES Admin, but it was fun while it lasted!
Offline  
Old 02-20-2010, 09:01 PM   #4 (permalink)
BlackBerry Elite
 
knottyrope's Avatar
 
Join Date: Jan 2008
Location: Massachusetts
Model: Z30
OS: 10.2.1
PIN: t of blood has been taken
Carrier: AT&T-US with I dee ten tee errors
Posts: 6,564
Post Thanks: 256
Thanked 260 Times in 246 Posts
Default

Been discussed

Disable BIS access to Exchange Server
__________________
irony : many old timer posters have de-evolved into the trolls they once fought
I am on http://supportforums.blackberry.com
BES 10 running sweet for my Z30, Z10 and Q10
Offline  
Old 02-22-2010, 09:15 AM   #5 (permalink)
BlackBerry Extraordinaire
 
CanuckBB's Avatar
 
Join Date: Feb 2006
Location: YYZ
Model: 9900
Carrier: Rogers
Posts: 1,183
Post Thanks: 0
Thanked 2 Times in 2 Posts
Default

Install BES Express
Offline  
Old 02-22-2010, 10:24 AM   #6 (permalink)
BlackBerry Elite
 
knottyrope's Avatar
 
Join Date: Jan 2008
Location: Massachusetts
Model: Z30
OS: 10.2.1
PIN: t of blood has been taken
Carrier: AT&T-US with I dee ten tee errors
Posts: 6,564
Post Thanks: 256
Thanked 260 Times in 246 Posts
Default

Quote:
Originally Posted by CanuckBB View Post
Install BES Express
that will not block it though.
__________________
irony : many old timer posters have de-evolved into the trolls they once fought
I am on http://supportforums.blackberry.com
BES 10 running sweet for my Z30, Z10 and Q10
Offline  
Old 02-22-2010, 11:21 AM   #7 (permalink)
New Member
 
Join Date: Feb 2010
Model: 8700g
PIN: N/A
Carrier: t-mobile
Posts: 3
Post Thanks: 0
Thanked 0 Times in 0 Posts
Default

Quote:
Originally Posted by southwestcomm View Post
Your company won't deploy a BES due to cost yet you pay for NotifyLink?
We no longer pay for notifylink service since the move to Exchange 2007\2010. Users can still pay for the application which works with Exchange's ActiveSync.
Offline  
Old 02-22-2010, 11:33 AM   #8 (permalink)
New Member
 
Join Date: Feb 2010
Model: 8700g
PIN: N/A
Carrier: t-mobile
Posts: 3
Post Thanks: 0
Thanked 0 Times in 0 Posts
Default

Quote:
Originally Posted by juwaack68 View Post
There is a way to do it - I remember seeing a RIM KB article on it. You have to block a range of RIM's IP addresses to do it.

Seeing if I can find it.
I know about blocking the BIS subnets at the FW, but since we have BB users who use Astrasync and Notifylink we would like to avoid blocking everything if possible.

Both AstraSync and Notifylink which works with Exchange 2007\2010 ActiveSync's direct push still goes through BIS network.

Jay
Offline  
Old 02-22-2010, 12:42 PM   #9 (permalink)
BlackBerry Extraordinaire
 
CanuckBB's Avatar
 
Join Date: Feb 2006
Location: YYZ
Model: 9900
Carrier: Rogers
Posts: 1,183
Post Thanks: 0
Thanked 2 Times in 2 Posts
Default

Quote:
Originally Posted by knottyrope View Post
that will not block it though.
No, but BESX will allow the OP to block the RIM BIS IPs, because he will no longer require ActiveSync.

Or disable OWA for the users.

Or hide OWA behind an ISA firewall.
Offline  
Old 02-25-2010, 12:22 PM   #10 (permalink)
BlackBerry Elite
 
knottyrope's Avatar
 
Join Date: Jan 2008
Location: Massachusetts
Model: Z30
OS: 10.2.1
PIN: t of blood has been taken
Carrier: AT&T-US with I dee ten tee errors
Posts: 6,564
Post Thanks: 256
Thanked 260 Times in 246 Posts
Default

BIS does not like forms based AUTH only with ISA for OWA.
__________________
irony : many old timer posters have de-evolved into the trolls they once fought
I am on http://supportforums.blackberry.com
BES 10 running sweet for my Z30, Z10 and Q10
Offline  
Closed Thread


Thread Tools

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On





Copyright 2004-2014 BlackBerryForums.com.
The names RIM and BlackBerry are registered Trademarks of BlackBerry Inc.