Solved

Android Security issues

Posted on 2011-02-10
11
534 Views
Last Modified: 2012-05-11
My company is evaluating Android phones as a mobile platform.  Can anyone tell me if there is a third party application that will allow us to encrypt the data stored on the phone?  We are most concerned with email.
0
Comment
Question by:sunny10
  • 7
  • 4
11 Comments
 
LVL 25

Expert Comment

by:RobMobility
ID: 34871572
Hi,

Take a look at Good Mobile Enterprise - includes both a push email solution as well as control mechanism - device policies, encryption etc.

www.good.com

Similar to Blackberry in operation - i.e. all coms outbound from company so no inbound firewall rules to servers etc.

Regards,


RobMobility.
0
 
LVL 25

Assisted Solution

by:RobMobility
RobMobility earned 125 total points
ID: 34871588
Hi,

For device only, look at McAfee Enterprise (was Trust Digital) - http://www.mcafee.com/us/products/enterprise-mobility-management.aspx

Regards.


RobMobility.
0
 
LVL 25

Expert Comment

by:RobMobility
ID: 34871606
Hi,

When looking at encryption, look for FIPS 140-2 certified - this means it is assured for Government use and will give your company confidence in the keys used and the mechanism used to generate the keys.

Regards,


RobMobility.
0
 

Author Comment

by:sunny10
ID: 34871996
Thanks RobMobility, it doesn't appear that either of these products can enforce device encryption on an Android device.  Good can enforce policies that prohibit documents, etc. from being stored on the card, but the mail store is still unencrypted.  
0
 
LVL 25

Expert Comment

by:RobMobility
ID: 34872217
Hi,

The mail is stored in an proprietary client and encrypted.

CONTAINING CORPORATE DATA
Good for Enterprise provides a secure, “contained”
environment by encrypting data from the corporate
server and isolating it at all times within a separate
Android application.

Regards,


RobMobility.
0
IT, Stop Being Called Into Every Meeting

Highfive is so simple that setting up every meeting room takes just minutes and every employee will be able to start or join a call from any room with ease. Never be called into a meeting just to get it started again. This is how video conferencing should work!

 
LVL 25

Expert Comment

by:RobMobility
ID: 34872326
Hi,

McAfee's product is based on Trust Digital Enterprise Management which does enforce encryption:

 for instance, integrating Trust Digital's encryption and management capabilities for Android with McAfee content protection and other security.

Regards,


RobMobility.
0
 

Author Comment

by:sunny10
ID: 34873202
So the email will be encrypted provided the user is using the proprietary Good client?  Is that correct?  If the user has their email configured on the built-in email app, that's not encrypted?  Is this a correct assumption?  (forgive my ignorance, I'm new to this phone)  
0
 
LVL 25

Expert Comment

by:RobMobility
ID: 34873270
Hi,

With Good, you have to use their application not the inbuilt ActiveSync application. That's part of the solution and provides consistency across all platforms - i.e. email look, feel and functionality is consistent.

Regards,


RobMobility.
0
 

Author Comment

by:sunny10
ID: 34873333
Ok, good.  Now if we used McAfee though, we could encrypt the built in email client?
0
 

Author Comment

by:sunny10
ID: 34873342
Also, when you say "With Good, you have to use their application not the inbuilt ActiveSync application"  does Good block the ability to use the built in client?
0
 
LVL 25

Accepted Solution

by:
RobMobility earned 125 total points
ID: 34887372
Hi,

I have not used Good with Android so I am referring to the documentation in responding here - there is no specific mention of it not working with Android (only Nokia).

Good Mobile Control enables you to define application policies and block those you prohibit. In addition, the compliance manager prevents access to the email application if certain conditions (which the administrator specifies) are not met.

It would be worth contacting Good yourself and highlighting the functionality you are specifically looking for to determine if the product fully meets your requiremens on Android.

With regards to McAfee Enterprise Mobility, I used it when it was Trust Digital on Windows Mobile devices and in that scenario, you could encrypt PIM and other files on the device. Again I would suggest you either peruse their administration documentation or contact them directly to ascertain whether their product meets your requirements.

Regards,


RobMobility.
0

Featured Post

Find Ransomware Secrets With All-Source Analysis

Ransomware has become a major concern for organizations; its prevalence has grown due to past successes achieved by threat actors. While each ransomware variant is different, we’ve seen some common tactics and trends used among the authors of the malware.

Join & Write a Comment

#SSL #TLS #Citrix #HTTPS #PKI #Compliance #Certificate #Encryption #StoreFront #Web Interface #Citrix XenApp
Let Bitmoji into your life. Now is the time to learn a new language of smartphone messaging with this brief introduction.
Illustrator's Shape Builder tool will let you combine shapes visually and interactively. This video shows the Mac version, but the tool works the same way in Windows. To follow along with this video, you can draw your own shapes or download the file…
Polish reports in Access so they look terrific. Take yourself to another level. Equations, Back Color, Alternate Back Color. Write easy VBA Code. Tighten space to use less pages. Launch report from a menu, considering criteria only when it is filled…

744 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

12 Experts available now in Live!

Get 1:1 Help Now