?
Solved

Android Security issues

Posted on 2011-02-10
11
Medium Priority
?
550 Views
Last Modified: 2012-05-11
My company is evaluating Android phones as a mobile platform.  Can anyone tell me if there is a third party application that will allow us to encrypt the data stored on the phone?  We are most concerned with email.
0
Comment
Question by:sunny10
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 7
  • 4
11 Comments
 
LVL 25

Expert Comment

by:RobMobility
ID: 34871572
Hi,

Take a look at Good Mobile Enterprise - includes both a push email solution as well as control mechanism - device policies, encryption etc.

www.good.com

Similar to Blackberry in operation - i.e. all coms outbound from company so no inbound firewall rules to servers etc.

Regards,


RobMobility.
0
 
LVL 25

Assisted Solution

by:RobMobility
RobMobility earned 500 total points
ID: 34871588
Hi,

For device only, look at McAfee Enterprise (was Trust Digital) - http://www.mcafee.com/us/products/enterprise-mobility-management.aspx

Regards.


RobMobility.
0
 
LVL 25

Expert Comment

by:RobMobility
ID: 34871606
Hi,

When looking at encryption, look for FIPS 140-2 certified - this means it is assured for Government use and will give your company confidence in the keys used and the mechanism used to generate the keys.

Regards,


RobMobility.
0
Industry Leaders: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

 

Author Comment

by:sunny10
ID: 34871996
Thanks RobMobility, it doesn't appear that either of these products can enforce device encryption on an Android device.  Good can enforce policies that prohibit documents, etc. from being stored on the card, but the mail store is still unencrypted.  
0
 
LVL 25

Expert Comment

by:RobMobility
ID: 34872217
Hi,

The mail is stored in an proprietary client and encrypted.

CONTAINING CORPORATE DATA
Good for Enterprise provides a secure, “contained”
environment by encrypting data from the corporate
server and isolating it at all times within a separate
Android application.

Regards,


RobMobility.
0
 
LVL 25

Expert Comment

by:RobMobility
ID: 34872326
Hi,

McAfee's product is based on Trust Digital Enterprise Management which does enforce encryption:

 for instance, integrating Trust Digital's encryption and management capabilities for Android with McAfee content protection and other security.

Regards,


RobMobility.
0
 

Author Comment

by:sunny10
ID: 34873202
So the email will be encrypted provided the user is using the proprietary Good client?  Is that correct?  If the user has their email configured on the built-in email app, that's not encrypted?  Is this a correct assumption?  (forgive my ignorance, I'm new to this phone)  
0
 
LVL 25

Expert Comment

by:RobMobility
ID: 34873270
Hi,

With Good, you have to use their application not the inbuilt ActiveSync application. That's part of the solution and provides consistency across all platforms - i.e. email look, feel and functionality is consistent.

Regards,


RobMobility.
0
 

Author Comment

by:sunny10
ID: 34873333
Ok, good.  Now if we used McAfee though, we could encrypt the built in email client?
0
 

Author Comment

by:sunny10
ID: 34873342
Also, when you say "With Good, you have to use their application not the inbuilt ActiveSync application"  does Good block the ability to use the built in client?
0
 
LVL 25

Accepted Solution

by:
RobMobility earned 500 total points
ID: 34887372
Hi,

I have not used Good with Android so I am referring to the documentation in responding here - there is no specific mention of it not working with Android (only Nokia).

Good Mobile Control enables you to define application policies and block those you prohibit. In addition, the compliance manager prevents access to the email application if certain conditions (which the administrator specifies) are not met.

It would be worth contacting Good yourself and highlighting the functionality you are specifically looking for to determine if the product fully meets your requiremens on Android.

With regards to McAfee Enterprise Mobility, I used it when it was Trust Digital on Windows Mobile devices and in that scenario, you could encrypt PIM and other files on the device. Again I would suggest you either peruse their administration documentation or contact them directly to ascertain whether their product meets your requirements.

Regards,


RobMobility.
0

Featured Post

VIDEO: THE CONCERTO CLOUD FOR HEALTHCARE

Modern healthcare requires a modern cloud. View this brief video to understand how the Concerto Cloud for Healthcare can help your organization.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

SSL stands for “Secure Sockets Layer” and an SSL certificate is a critical component to keeping your website safe, secured, and compliant. Any ecommerce website must have an SSL certificate to ensure the safe handling of sensitive information like…
The well known Cerber ransomware continues to spread this summer through spear phishing email campaigns targeting enterprises. Learn how it easily bypasses traditional defenses - and what you can do to protect your data.
The Email Laundry PDF encryption service allows companies to send confidential encrypted  emails to anybody. The PDF document can also contain attachments that are embedded in the encrypted PDF. The password is randomly generated by The Email Laundr…
With Secure Portal Encryption, the recipient is sent a link to their email address directing them to the email laundry delivery page. From there, the recipient will be required to enter a user name and password to enter the page. Once the recipient …
Suggested Courses

777 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question