We help IT Professionals succeed at work.

BES Express - Restrict Internet / Restrict Apps

tribz
tribz asked
on
I've set up a BES Express server and an SBS 2011 server and I'm seeing some conflicting advise across the internet about something I've been asked to set tup.

1st. One of my groups needs to have no access to the internet other than for email.

2nd. The same group also needs to have some of the apps removed. Namely the Facebook and Youtube app. I can remove these manually but can they be put back in? Or even better, can I remove them as part of a policy.

Please bear in mind it is the Express version of the software which doesnt seem to have the policies that I need ... am I wrong?

Kind regards,
tribz
Comment
Watch Question

Brian BEE Topic Advisor, Independant Technology Professional

Commented:
1. Simply contact your service provider and tell them you only want email and nothing else. We have several users set up this way. This will also save the company some money as they won't have to pay for a full data plan for those phones.
2. If you delete an app from a Blackberry and that Blackberry is prevented by policy from installing applications, that should be all you need. This is possible in BESX.

Alternatively, there is also some changes you can make to block Facebook here: http://blog.v1corp.com/2010/03/08/facebook-and-bes-express/

Author

Commented:
THanks for the reply. It is possible to restrict access to certain websites or even remove the Web Browser app?

Author

Commented:
In the first link, does that just apply to BES as I dont see the option in BESX
Commented:
Hi,

Unfortunately, you are correct, BESX does not provide you with the IT Policies you need in order to configure the security you need.

Even if you did switch each device to use MDS-CS (use BlackBerry browser instead of BIS browser) and in doing so, configured URL Pull rules for specific groups (URL pull rules may not be an option on BESX), then they could still switch to the Internet Browser (BIS) and access the internet.

You can disable 3rd party downloads and configure application control policies which should restrict the FaceBook etc. apps.

Regards,


RobMobility.

Author

Commented:
@RobMobility:

Thanks for the info. So to clarify, the PULL rules only apply to the BlackBerry Browser and not the Internet Browser?

I have been given this link by the carrier who say it should allow the disabling of the URL's

http://docs.blackberry.com/en/admin/deliverables/27983/Restricting_access_to_content_on_web_servers_1027406_11.jsp

Is there any mileage in doing this. I have set it up but it has made no difference.

Thanks for your assistance.
Brian BEE Topic Advisor, Independant Technology Professional

Commented:
The document link I provided does say you can disable the blackberry browser in BESX, but you can't disable other third-party browsers if they have been added. However as a workaround to that, you could remove third party browsers and disable adding applications before the phone goes out.

Author

Commented:
Thanks for all the input. I never really got to the bottom of this so everyone is on default policy at the moment