Link to home
Start Free TrialLog in
Avatar of sunny10
sunny10

asked on

Android Security issues

My company is evaluating Android phones as a mobile platform.  Can anyone tell me if there is a third party application that will allow us to encrypt the data stored on the phone?  We are most concerned with email.
Avatar of Rob Knight
Rob Knight
Flag of United Kingdom of Great Britain and Northern Ireland image

Hi,

Take a look at Good Mobile Enterprise - includes both a push email solution as well as control mechanism - device policies, encryption etc.

www.good.com

Similar to Blackberry in operation - i.e. all coms outbound from company so no inbound firewall rules to servers etc.

Regards,


RobMobility.
SOLUTION
Avatar of Rob Knight
Rob Knight
Flag of United Kingdom of Great Britain and Northern Ireland image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Hi,

When looking at encryption, look for FIPS 140-2 certified - this means it is assured for Government use and will give your company confidence in the keys used and the mechanism used to generate the keys.

Regards,


RobMobility.
Avatar of sunny10
sunny10

ASKER

Thanks RobMobility, it doesn't appear that either of these products can enforce device encryption on an Android device.  Good can enforce policies that prohibit documents, etc. from being stored on the card, but the mail store is still unencrypted.  
Hi,

The mail is stored in an proprietary client and encrypted.

CONTAINING CORPORATE DATA
Good for Enterprise provides a secure, “contained”
environment by encrypting data from the corporate
server and isolating it at all times within a separate
Android application.

Regards,


RobMobility.
Hi,

McAfee's product is based on Trust Digital Enterprise Management which does enforce encryption:

 for instance, integrating Trust Digital's encryption and management capabilities for Android with McAfee content protection and other security.

Regards,


RobMobility.
Avatar of sunny10

ASKER

So the email will be encrypted provided the user is using the proprietary Good client?  Is that correct?  If the user has their email configured on the built-in email app, that's not encrypted?  Is this a correct assumption?  (forgive my ignorance, I'm new to this phone)  
Hi,

With Good, you have to use their application not the inbuilt ActiveSync application. That's part of the solution and provides consistency across all platforms - i.e. email look, feel and functionality is consistent.

Regards,


RobMobility.
Avatar of sunny10

ASKER

Ok, good.  Now if we used McAfee though, we could encrypt the built in email client?
Avatar of sunny10

ASKER

Also, when you say "With Good, you have to use their application not the inbuilt ActiveSync application"  does Good block the ability to use the built in client?
ASKER CERTIFIED SOLUTION
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial