[2 days left] What’s wrong with your cloud strategy? Learn why multicloud solutions matter with Nimble Storage.Register Now

x
?
Solved

How to secure device using ActiveSync from Syncing with unauthorzied devices with same OS platform

Posted on 2014-01-08
5
Medium Priority
?
347 Views
Last Modified: 2014-01-09
Hi Experts

I've Google this question in different ways, but didn't find the answer I'm looking for, so I thought I would try here.

We are in the midst of discussions on ActiveSync usage, as whether to move away from strictly BBs and BES environment that we have now, which is working fine as is... but...  

We recently migrated to using Office 365 and I've got all our BBs now activated in the Blackberry Cloud Services that is integrated with Office 365.  We have users requesting BB10 devices(Q10/Z10), currently BBCS with Office 365 doesn't provide Enterprise Activation for BB10 devices. I have not been able to get any info as to if and when RIM plans to upgrade their BBCS to BES10 platform. So if we let Users get BB10 devices we have to Use ActiveSync protocol, and with that, Users are asking if we'd consider another platform such as IPhone or Android.

Question that came out of that is if a Users has a Corporate Authorized IPhone for Example: also owns a Personal IPad(popular).  Are we able to prevent them from Syncing the two iOS devices?  If I understand correctly, if they are fully Synced the email from the authorized phone can find it way over to the Unauthorized personal IPad if the User was to enable Syncing of devices, am I correct in that assumption? and if Yes, this is possible with iOS and perhaps even Android devices? Is there a way for us to prevent Syncing of Devices in that way, via ActiveSync policies or on the Phone itself?

Thank you
Note: I'm on Atlantic Canada time
0
Comment
Question by:CATHY-IT
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
  • 2
5 Comments
 
LVL 37

Accepted Solution

by:
Jamie McKillop earned 1000 total points
ID: 39767873
Hello,

The Exchange mail account will not sync between the devices. Only the iCloud me.com address will sync between devices. If you have device quarantine tuned on in your Exchange environment, you can control which devices are allowed to sync with your Exchange server. Unless the user starts forwarding all their email to an outside address, the mail will not end up on any other iOS devices.

-JJ
0
 

Author Comment

by:CATHY-IT
ID: 39769003
Yes, I do have quarantine turned on to allow me to approve devices. Thanks for confirming our question.

Just a quick opinion, do you consider ActiveSync a secure alternative to use instead of BES? Or should I be pushing to stay with BES and wait for RIM to upgrade the Blackberry Business Cloud Services to BB10 version to allow BES connection with BB10 OS devices.
0
 
LVL 37

Expert Comment

by:Jamie McKillop
ID: 39769037
In my opinion, BES security is over hyped. We are really looking at two distinct security components. The fist is the data flow between the server and the device. BES is more secure with its 256bit encryption but we rely on the 128bit encryption ActiveSync uses for everything else on the internet. If you are allowing your users to use webmail, the security level is the same as ActiveSync. The other component is the device itself. Again, Blackberry has better device security than competing devices but it isn't a trivial process to get data off Andriod or iOS devices that have a proper passcode. The reality is that unless you operate in an ultra high security environment, such as the defense industry, your data isn't likely going to be worth the cost and effort to crack into the data stream or the device itself.

-JJ
0
 

Author Comment

by:CATHY-IT
ID: 39769087
That's the general notion I had, but definitely different opinions out there about it.  Though I do like that the BES can Push other Policy that ActiveSync just doesn't have.

Thanks Again
0
 

Author Closing Comment

by:CATHY-IT
ID: 39769089
Thanks again
0

Featured Post

Get your Conversational Ransomware Defense e‑book

This e-book gives you an insight into the ransomware threat and reviews the fundamentals of top-notch ransomware preparedness and recovery. To help you protect yourself and your organization. The initial infection may be inevitable, so the best protection is to be fully prepared.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Article by: Justin
In light of the WannaCry ransomware attack that affected millions of Windows machines, you might wonder if your Mac needs protecting. Yes, it does and here is how to do it.
With so many activities to perform, Exchange administrators are always busy in organizations. If everything, including Exchange Servers, Outlook clients, and Office 365 accounts work without any issues, they can sit and relax. But unfortunately, it…
CodeTwo Sync for iCloud (http://www.codetwo.com/sync-for-icloud?sts=6554) automatically synchronizes your Outlook 2016, 2013, 2010 or 2007 folders with iCloud folders available via iCloud Control Panel. This lets you automatically sync them with…
This is my first video review of Microsoft Bookings, I will be doing a part two with a bit more information, but wanted to get this out to you folks.

656 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question