[tnthunder]

hi,

I'm a BES Admin for my companies, and i would like to know how can we monitor blackberry messenger messages coming in and going out.

we have had a few company information leeks.
can you please tell me how we can audit PIN, SMS and blackberry messenger messages.

please let me know, i would really like to know

regards

[johnnytwotoes]

There is a lot of confusion over this issue. BES 4.1 will allow for auditing of PIN and SMS messages including the content to the .csv log files on the server which the administer can read.

However, it is my understanding that while Blackberry Messenger is a form of PIN to PIN, these messages are NOT saved to the PIN .csv log file.

I further understand that the only way to log Blackberry Messenger messages is to set BES up for an individual users Blackberry to send an email copy of the BB message which will result in the user being able to see the email containing their messages in their sent items.

Can any of the people that have discussed this in the past weigh in on whether this is correct or not?

thx

[tsac]

If your using a BES you should be monitoring the email system such as Outlook.
Just be very careful you have the proper notifications in place to anyone using email otherwise your open to a lawsuit. Once notifyed you're being monitored, your free to do so. Just be sure your management backs your intent in WRITING


Welcome to the forums

[SteveO86]

What tsac said.

I also want to add the following, to log that info from the BES you should enforce it via IT policy, in the IT policy go to the PIM synch group and make sure the disable SMS, PIN wireless sync is disabled/set to false, the logs should be kept in the "C:\Program Files\Research In Motion\BlackBerry Enterprise Server\Logs\%date%" directory (if you modified the installation that path will be different). By default only the phone call logs are logged on the BES.

[johnnytwotoes]

OK, good points. But what about the ability to audit Blackberry Messenger messages? Aside from the emailing of a specific user from their device?

[SteveO86]

Originally Posted by johnnytwotoes

OK, good points. But what about the ability to audit Blackberry Messenger messages? Aside from the emailing of a specific user from their device?

Maybe because it's getting late but I'm not sure what you mean by that.

(My other post mentions enabling the auditing of the BBM mesages threw an IT Policy, all the messages via the BBM is logged in a log in the directory I mentioned above if the defaults were used during installation.)

[johnnytwotoes]

BES 4.1 will log all SMS and PIN messages when enabled but I understand that it does not log Blackberry Messenger content.

I understand that you can set a device to email Messenger content on a periodic basis but this is visible to the user through their sent items folder.

Can anyone confirm my understanding on this?

[sangelini]

tnthunder..

You can only log BBM thru setting up an IT policy and having messages emailed to someone (BES Admin). But please understand that the audited message will only contain the portion of the message written by the user who has the IT policy applied, If they are messaging with someone outside your control (IT policy) then you will only see half the message.

As for PIN and SMS these you can have saved to a log file. Check out the following procedure.

BlackBerry Enterprise Server software version 4.1 can log personal identification number (PIN) messages and Short Message Service (SMS) messages that have been sent and received on a BlackBerry device. These logs are then kept in a central repository. By default, only phone call logging is turned on.

To modify the settings for either of these features, complete the following steps:
In BlackBerry Manager, in the left pane, select the BlackBerry Enterprise Server you want to modify.
Select the Server Configuration tab, and click Edit Properties.
Click Sync Server.
Double-click Audit Root Directory.
If you want to save the log files, type the path to the location where you would like to save the files and click OK.
In the left pane, click BlackBerry Domain.
Select the Global tab and click Edit Properties.
Click IT Policy.
In the IT Policy Administration section, double-click IT Policies.
Select one of the policies in the list.
Click Properties > PIM Sync Policy Group.
To monitor SMS or PIN messages, complete the steps in the table below:
Monitor the SMS messages BlackBerry device users send and receive from BlackBerry devices.
Click Disable SMS Messages Wireless Sync.
In the drop-down list, select False.
Monitor the PIN messages BlackBerry device users send and receive from BlackBerry devices.
Click Disable PIN Messages Wireless Sync.
In the drop-down list, select False.
Click OK to close the open windows.
Restart the BlackBerry Synchronization Service. The BlackBerry Enterprise Server creates the log files using the following formats:
PIN messages: PINLog_<YYYYMMDD>.csv
SMS messages: SMSLog_<YYYYMMDD>.csv
Phone calls: PhoneCallLog_<YYYYMMDD>.csv

If any of my info is incorrect please feel free to correct me..always learning

[blackberryworms]

What information is contained in the audit file? Does it contain images and files sent or just the names?

[juwaack68]

I believe the audit file contains PIN/Names and text.

It just baffles me that RIM can [easily and behind the scenes] audit/log the content of SMS messages (which travel over the carriers voice network), but not messages using software that they wrote!

[Frank Castle]

Considering I have a number to compliance needs we started auditing BB last year and in fact the BB Messenger is logged and stored within the PIN log.

If this is an area you need I highly suggest looking into a 3rd party tool to better review as the logs are just ugly and a PITA to deal with for discovery.

Gwava
CommonDesk
Facetime

All have very robust solutions that should meet any compliance guidelines you have.

[audit]

Originally Posted by juwaack68

I believe the audit file contains PIN/Names and text.

Oh I contain MUCH more then that

[Jadey]

Originally Posted by jletendre

Considering I have a number to compliance needs we started auditing BB last year and in fact the BB Messenger is logged and stored within the PIN log.

Really? What data exactly?
I know that when adding BBM contacts the handshake is stored in the PIN log, but I didn't think ANY chat data was.

Would be curious for more info on this. I thought this was still the state of play http://www.blackberryforums.com/bes-...ersations.html

[Frank Castle]

Ok this is what I see (edited)

"last name, first","PIN","email address","Outgoing","PIN","","","Last,First PIN","<$RemoveOnDelivery,SuppressSaveInSentItems> BLACKBERRYMESSENGERINVITESTAGE2","-----xxx65532;----

So you are right .. it doesn't list the message.