Solved

Android Security issues

Posted on 2011-02-10
11
545 Views
Last Modified: 2012-05-11
My company is evaluating Android phones as a mobile platform.  Can anyone tell me if there is a third party application that will allow us to encrypt the data stored on the phone?  We are most concerned with email.
0
Comment
Question by:sunny10
  • 7
  • 4
11 Comments
 
LVL 25

Expert Comment

by:RobMobility
ID: 34871572
Hi,

Take a look at Good Mobile Enterprise - includes both a push email solution as well as control mechanism - device policies, encryption etc.

www.good.com

Similar to Blackberry in operation - i.e. all coms outbound from company so no inbound firewall rules to servers etc.

Regards,


RobMobility.
0
 
LVL 25

Assisted Solution

by:RobMobility
RobMobility earned 125 total points
ID: 34871588
Hi,

For device only, look at McAfee Enterprise (was Trust Digital) - http://www.mcafee.com/us/products/enterprise-mobility-management.aspx

Regards.


RobMobility.
0
 
LVL 25

Expert Comment

by:RobMobility
ID: 34871606
Hi,

When looking at encryption, look for FIPS 140-2 certified - this means it is assured for Government use and will give your company confidence in the keys used and the mechanism used to generate the keys.

Regards,


RobMobility.
0
Independent Software Vendors: We Want Your Opinion

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

 

Author Comment

by:sunny10
ID: 34871996
Thanks RobMobility, it doesn't appear that either of these products can enforce device encryption on an Android device.  Good can enforce policies that prohibit documents, etc. from being stored on the card, but the mail store is still unencrypted.  
0
 
LVL 25

Expert Comment

by:RobMobility
ID: 34872217
Hi,

The mail is stored in an proprietary client and encrypted.

CONTAINING CORPORATE DATA
Good for Enterprise provides a secure, “contained”
environment by encrypting data from the corporate
server and isolating it at all times within a separate
Android application.

Regards,


RobMobility.
0
 
LVL 25

Expert Comment

by:RobMobility
ID: 34872326
Hi,

McAfee's product is based on Trust Digital Enterprise Management which does enforce encryption:

 for instance, integrating Trust Digital's encryption and management capabilities for Android with McAfee content protection and other security.

Regards,


RobMobility.
0
 

Author Comment

by:sunny10
ID: 34873202
So the email will be encrypted provided the user is using the proprietary Good client?  Is that correct?  If the user has their email configured on the built-in email app, that's not encrypted?  Is this a correct assumption?  (forgive my ignorance, I'm new to this phone)  
0
 
LVL 25

Expert Comment

by:RobMobility
ID: 34873270
Hi,

With Good, you have to use their application not the inbuilt ActiveSync application. That's part of the solution and provides consistency across all platforms - i.e. email look, feel and functionality is consistent.

Regards,


RobMobility.
0
 

Author Comment

by:sunny10
ID: 34873333
Ok, good.  Now if we used McAfee though, we could encrypt the built in email client?
0
 

Author Comment

by:sunny10
ID: 34873342
Also, when you say "With Good, you have to use their application not the inbuilt ActiveSync application"  does Good block the ability to use the built in client?
0
 
LVL 25

Accepted Solution

by:
RobMobility earned 125 total points
ID: 34887372
Hi,

I have not used Good with Android so I am referring to the documentation in responding here - there is no specific mention of it not working with Android (only Nokia).

Good Mobile Control enables you to define application policies and block those you prohibit. In addition, the compliance manager prevents access to the email application if certain conditions (which the administrator specifies) are not met.

It would be worth contacting Good yourself and highlighting the functionality you are specifically looking for to determine if the product fully meets your requiremens on Android.

With regards to McAfee Enterprise Mobility, I used it when it was Trust Digital on Windows Mobile devices and in that scenario, you could encrypt PIM and other files on the device. Again I would suggest you either peruse their administration documentation or contact them directly to ascertain whether their product meets your requirements.

Regards,


RobMobility.
0

Featured Post

Free Tool: Port Scanner

Check which ports are open to the outside world. Helps make sure that your firewall rules are working as intended.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
Phone service in Israel 4 116
wondershare 17 93
Best practice for ssh keys exchange : 1-way (& which way) or 2-ways 3 56
Best way to encrypt a xls file 8 26
As a financial services provider, your business is impacted by two of the strictest federal regulations on record: the Sarbanes-Oxley Act and the Gramm-Leach-Bliley Act. Correctly implementing faxing into your organization to provide secure, real-ti…
Healthcare providers, insurance companies and other covered entities trust eFax Corporate to transmit their most sensitive documents. eFax Corporate can help your organization implement a HIPAA compliant cloud faxing solution.
The Email Laundry PDF encryption service allows companies to send confidential encrypted  emails to anybody. The PDF document can also contain attachments that are embedded in the encrypted PDF. The password is randomly generated by The Email Laundr…
The Email Laundry PDF encryption service allows companies to send confidential encrypted  emails to anybody. The PDF document can also contain attachments that are embedded in the encrypted PDF. The password is randomly generated by The Email Laundr…

696 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question