• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 557
  • Last Modified:

Android Security issues

My company is evaluating Android phones as a mobile platform.  Can anyone tell me if there is a third party application that will allow us to encrypt the data stored on the phone?  We are most concerned with email.
0
sunny10
Asked:
sunny10
  • 7
  • 4
2 Solutions
 
Rob KnightConsultantCommented:
Hi,

Take a look at Good Mobile Enterprise - includes both a push email solution as well as control mechanism - device policies, encryption etc.

www.good.com

Similar to Blackberry in operation - i.e. all coms outbound from company so no inbound firewall rules to servers etc.

Regards,


RobMobility.
0
 
Rob KnightConsultantCommented:
Hi,

For device only, look at McAfee Enterprise (was Trust Digital) - http://www.mcafee.com/us/products/enterprise-mobility-management.aspx

Regards.


RobMobility.
0
 
Rob KnightConsultantCommented:
Hi,

When looking at encryption, look for FIPS 140-2 certified - this means it is assured for Government use and will give your company confidence in the keys used and the mechanism used to generate the keys.

Regards,


RobMobility.
0
Free Tool: SSL Checker

Scans your site and returns information about your SSL implementation and certificate. Helpful for debugging and validating your SSL configuration.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

 
sunny10Author Commented:
Thanks RobMobility, it doesn't appear that either of these products can enforce device encryption on an Android device.  Good can enforce policies that prohibit documents, etc. from being stored on the card, but the mail store is still unencrypted.  
0
 
Rob KnightConsultantCommented:
Hi,

The mail is stored in an proprietary client and encrypted.

CONTAINING CORPORATE DATA
Good for Enterprise provides a secure, “contained”
environment by encrypting data from the corporate
server and isolating it at all times within a separate
Android application.

Regards,


RobMobility.
0
 
Rob KnightConsultantCommented:
Hi,

McAfee's product is based on Trust Digital Enterprise Management which does enforce encryption:

 for instance, integrating Trust Digital's encryption and management capabilities for Android with McAfee content protection and other security.

Regards,


RobMobility.
0
 
sunny10Author Commented:
So the email will be encrypted provided the user is using the proprietary Good client?  Is that correct?  If the user has their email configured on the built-in email app, that's not encrypted?  Is this a correct assumption?  (forgive my ignorance, I'm new to this phone)  
0
 
Rob KnightConsultantCommented:
Hi,

With Good, you have to use their application not the inbuilt ActiveSync application. That's part of the solution and provides consistency across all platforms - i.e. email look, feel and functionality is consistent.

Regards,


RobMobility.
0
 
sunny10Author Commented:
Ok, good.  Now if we used McAfee though, we could encrypt the built in email client?
0
 
sunny10Author Commented:
Also, when you say "With Good, you have to use their application not the inbuilt ActiveSync application"  does Good block the ability to use the built in client?
0
 
Rob KnightConsultantCommented:
Hi,

I have not used Good with Android so I am referring to the documentation in responding here - there is no specific mention of it not working with Android (only Nokia).

Good Mobile Control enables you to define application policies and block those you prohibit. In addition, the compliance manager prevents access to the email application if certain conditions (which the administrator specifies) are not met.

It would be worth contacting Good yourself and highlighting the functionality you are specifically looking for to determine if the product fully meets your requiremens on Android.

With regards to McAfee Enterprise Mobility, I used it when it was Trust Digital on Windows Mobile devices and in that scenario, you could encrypt PIM and other files on the device. Again I would suggest you either peruse their administration documentation or contact them directly to ascertain whether their product meets your requirements.

Regards,


RobMobility.
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Featured Post

Free Tool: Port Scanner

Check which ports are open to the outside world. Helps make sure that your firewall rules are working as intended.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

  • 7
  • 4
Tackle projects and never again get stuck behind a technical roadblock.
Join Now