BlackBerry Forums Support Community
              

Closed Thread
 
Thread Tools
Old 05-10-2007, 03:51 AM   #1
ondafly
New Member
 
Join Date: Jun 2006
Location: dublin, ireland
Model: 8310
Carrier: vodafone
Posts: 14
Default Blackberrys bypass our Websense Filters ?

Please Login to Remove!

Hi Folks,

We have a BES server with a small amount of BB users (23).

Our proxy is Windows 2003 with ISA and Websense. If I don't activate the proxy settings on BES for devices - the Blackberries can only access our corporate intranet. If I activate the proxy option, and type in our ISA servers name. The Blackberries get prompted for a username/pw , once entered they can surf to any website, effectively bypassing our websense filters.

Any ideas, or pointers for this ?

Thanks !
Offline  
Old 05-10-2007, 10:49 AM   #2
y2kcbr
Thumbs Must Hurt
 
y2kcbr's Avatar
 
Join Date: Dec 2006
Location: Napa, CA
Model: 9530
OS: 4.7.0.90
PIN: 3049E825
Carrier: Verizon
Posts: 95
Default

How is your BES setup in your environment? I read of something similiar to this happen in a test environment. They moved the BES/MDS in back of firewall with their Intranet/Proxy and it all seemed to work out. How are the BBs connecting to the Intranet btw?
__________________
-= Storm =-
Napa County IT Dept.
BES | Help Desk Support
Offline  
Old 05-11-2007, 06:36 AM   #3
ondafly
New Member
 
Join Date: Jun 2006
Location: dublin, ireland
Model: 8310
Carrier: vodafone
Posts: 14
Default

Hi - our BES sits in the same network as the Proxy (our internal LAN).

The blackberrys can happliy access our Intranet, and if you enter a site like google, you are prompted for domain details (user/pw). The page will load. Problem is you can view any site, which is seriously frowned upon, thus bypassing our websense.
Offline  
Old 05-11-2007, 10:46 PM   #4
jibi
BlackBerry God
 
jibi's Avatar
 
Join Date: Oct 2004
Location: Jibi's Secret Place
Model: 8900
OS: 4.6.1.174
Carrier: AT&T
Posts: 11,310
Default

Check the MDS logs and verify that they are, in fact, using MDS when browsing internet websites. You could see this behavior with a device configuration where the default browser is set to Internet Browser and the default MDS browser is configured as the BlackBerry Browser.
__________________
In the beginning the Universe was created. This has made a lot of people very angry and is widely regarded as a bad move.
Offline  
Old 05-12-2007, 03:38 AM   #5
gziz
Talking BlackBerry Encyclopedia
 
Join Date: Jun 2006
Model: 8700c
Carrier: cingular
Posts: 204
Default

i dont think it would ask him for a login if he was using the internet browser , would it?
Offline  
Old 05-23-2007, 08:27 AM   #6
vfig
New Member
 
Join Date: May 2007
Model: 8703e
PIN: N/A
Carrier: verizon
Posts: 1
Default Having the same problems

I am experiencing the same problem; we can’t get websense to filter the blackberry traffic. Our blackberry users can access our internal network and can access any website. When they access the internet they get prompted to authenticate. We have used a sniffer and see the traffic coming from the rim server to the bes server then to our proxy server and then back out. I’m able to see the session on the ISA server but unable to see anything logged in the websense reports

We are using websense 6.2, ISA is installed on a windows2000 server and I believe our Bes servers are windows2003.

I’ve contacted websense and they told me that "all blackberry devices as well as BES are not supported as of yet. It has not been tested fully. The time of support for this product is still unknown. With that being said, unfortunately, I will have to close out this ticket."

They also provided me the following to try but my boss is not willing to try it out.
" was able to find a possible solution to your Blackberry filtering issue. I researched some past tickets where we were able to get the customer filtering their Blackberries. This solution worked one time and did not work another.

Please note, as of right now, filtering of Blackberries is not a supported deployment. It has yet been tested, therefore it's current disposition. I was unable to find another solutions to your issue due to the lack of information since it's not supported. Therefore the solution below will be our only option.

Please attempt the following:

Edit the wsMSP.ini file on the ISA server in the system32 folder.
The following was added to the above file:

[configSection]
IgnoreForwardedRequest=0

Once saved, can you please restart the Web Proxy service on the ISA and then test the blackberries for filtering.

Although not supported, please let me know how it goes. I'll keep the ticket open till I hear back from you. Thank you"


If you are willing to try this fix, please let me know what the outcome is.
At this point we are at a stand still.
Any advice would be appreciated
Thanks
Offline  
Closed Thread


Thread Tools

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump


Dual Range Transistor Diode Semiconductor & Passive Curve Tracer Tester/Tracker picture

Dual Range Transistor Diode Semiconductor & Passive Curve Tracer Tester/Tracker

$28.49



STK416-120 Original Sanyo SIP23 Semiconductor picture

STK416-120 Original Sanyo SIP23 Semiconductor

$50.00



10x On Semiconductor BS170-D26Z MOSFET Transistor N Channel 500 mA, 60V, 1.2 ohm picture

10x On Semiconductor BS170-D26Z MOSFET Transistor N Channel 500 mA, 60V, 1.2 ohm

$8.75



New Peak Atlas DCA55 Semiconductor Component Analyzer Tester DCA 55   picture

New Peak Atlas DCA55 Semiconductor Component Analyzer Tester DCA 55

$87.94



Powerex Semiconductor E78240 04-16827 picture

Powerex Semiconductor E78240 04-16827

$50.00



ON SEMICONDUCTOR RM4194D / RM4194D (BRAND NEW) picture

ON SEMICONDUCTOR RM4194D / RM4194D (BRAND NEW)

$85.00







Copyright © 2004-2016 BlackBerryForums.com.
The names RIM © and BlackBerry © are registered Trademarks of BlackBerry Inc.