Device IT Policy Comparison

Transcription

1 Device IT Policy Comparison IT policies supported on devices synchronizing via the GO!NotifyLink for BlackBerry device application or GO!NotifyLink ActiveSync Solution Document Last Updated 01/15/15 GO!NotifyLink for BlackBerry Application 1

2 Table of Contents GO!NotifyLink for BlackBerry Application 3 GO!NotifyLink ActiveSync Solution Devices 9 Document Last Updated: 01/15/15 GO!NotifyLink for BlackBerry Application 2

3 GO!NotifyLink for BlackBerry Application Security = Supported = Future Release: Limitations may exist depending on operating environments Feature/Policy Description B l a c k B e r r y Allows only secure provisionable devices Only secure provisionable models are supported Password Locked Password must meet character pattern requirements - 4 strength levels for devices running Password Strength NL Device App Password Strength Locked Minimum Password Length Minimum of 8 characters required for passwords Minimal Password Allows a minimal password composed of 4 characters Device Password Expiration Set # of days before password expires Device Password Expiration Locked Device Password History Prevents user from reusing passwords too soon Device Password History Locked Set # of minutes before the device locks, due to inactivity Inactivity Timeout * Set on device using Auto-Lock: 1 to 5 minutes Inactivity Timeout Locked Challenge Timeout Timeout lock regardless of activity; challenges use of device if lost or stolen Document Last Updated 01/15/15 GO!NotifyLink for BlackBerry Application 3

4 Challenge Timeout Locked Allows dialing of 4 configurable emergency numbers when inactivity or challenge locks are Emergency Call Rules imposed. Password Echo Unmasks the last password typed to expose user entry error Password Echo Locked Wipe on Failed Unlock Attempts Maximum number of failed unlock attempts before device wipe Wipe on Failed Unlock Attempts Locked If compromised, user activates the duress notification by entering unlock password in an Duress Notification altered format Duress Notification Locked Lock Message Determine what message displays when a lock is imposed Lock Message Locked Remote Lock Administrator can initiate lock on device from remote location Remote Wipe Administrator can initiate data wipe on device from remote location Device Password Enabled Enable/disable password lock Device Encryption Encryption of data stored on device AES All Message Content Supported encryption protocol for data-in-motion TDES All Message Content Supported encryption protocol for data-in-motion SSL All Message Content Supported encryption protocol for data-in-motion Compress Transmitted Message Compression of traffic to the device Attachments Enabled Enable/disable attachment sync Max Attachment Size Limits attachment size Send Recipient Type Choose whether or not to include Recipient type on the notification if the user is listed in the CC: or BCC: field Send List of Recipients Choose whether or not to include a list, in addition to the original , showing addresses of TO: and CC: recipients Sync Reads Choose whether or not to include synchronize message status changes from the device Sync Reads Locked Sync Deletes Choose whether or not to include synchronize message status changes from the device BB Document Last Updated: 01/15/15 GO!NotifyLink for BlackBerry Application 4

5 Sync Deletes Locked Enable Smart Read Status Prevents sync of message read before device has retrieved it from the server Enable Smart Deletes Prevents sync of message deleted before device has retrieved it from the server Synchronize All Mail Choose whether all messages (read and unread) or only new unread mail is sent to device Synchronize Message Changes Choose whether or not to include synchronize message status changes from the server Message Availability Amount of time a message is available for replies/forwards from the device Smart Retrieval Limit quantity of the message body pulled from the server HTML s sent intact to the device. (Requires NLES and GO!NotifyLink for BlackBerry Allow HTML 4.7 versions) Disable (Notification ON/OFF) Enable/disable processing Track Notifications Track notifications for every PIM addition/change/deletion and synchronized from server to device. Notifications stored in the Sent Items folder on the groupware account. Track Device Mail Track every sent from the device. Tracked is stored in the Sent Items folder on the groupware account. Enable Folder Mirroring Allows folders selected for monitoring to be mirrored on the device. Replies to users messages contain the original message body in the notification. Include Response History (Defined on device) Signature Include defined signature on messages sent from the device. Filters Filter which messages are sent to the device PIM Disable PIM Enable/Disable PIM processing Sync Contacts Enable/Disable contact sync from server to device Sync Contacts Locked Select which personal address books to synchronize to the device Choose Address Books (For groupware servers that support multiple address books.) Sync Calendar Enable/Disable calendar sync from server to device Sync Calendar Locked Synchronization Range: Look Back Calendar events occurring after this date are synchronized Synchronization Range: Look Ahead Calendar events occurring before this date are synchronized Sync Tasks Enable/Disable task sync from server to device Sync Tasks Locked BB Document Last Updated 01/15/15 GO!NotifyLink for BlackBerry Application 5

6 Tasks Look Ahead Server syncs tasks with start or due dates that fall in the look-ahead range Sends information to the device Inbox summarizing PIM additions/changes/ deletions PIM Change Summary downloaded from the server PIM Change Summary Locked Synchronization Pop-ups Device shows a pop-up alert when new PIM data is synchronized (BlackBerry devices) Synchronization Pop-ups Locked Allow Send Meeting Invitations Allow/disallowed sending meeting invitations to device Verbose Logging Offers various detail levels for troubleshooting PIM processing and PIM Push Type Settings Choose Scheduled or Direct Push Push Type Locked Weekday Settings Weekday push timeframes Weekday Settings Locked Weekend Settings Weekend push timeframes Weekend Settings Locked Notification Alert Device shows a pop-up alert when new or PIM data is received Notification Alert Locked Send Error Messages Error messages sent to device if errors are encountered User Access (User Permissions in Client Web) Edit Notification Format format and attachment descriptors Edit Calendar Sync Settings Enable sync, set range, reminders, summary, etc. Edit Contact Sync Settings Enable sync, choose address books Edit Task Sync Settings Enable sync, look ahead range Edit Control Options Messaging, tracking, and PIM options Edit Account Settings Update username/passwords associated with groupware account Edit Display Name Define the name that will display in the From: field of the sent from the user s device. Edit Sender Settings Settings for multiple devices registered to one GO!NotifyLink account. Delete Blocks Remove device issued blocks on addresses BB BB Document Last Updated: 01/15/15 GO!NotifyLink for BlackBerry Application 6

7 Create Filters Filter the synchronized to device Choose Folders Select folders to be monitored for synchronization Edit Security Settings Encryption type/key, Authentication password Edit Signature Signature included on s sent Edit Device Settings Device time zone, PIN, etc. View User Statistics Allow users to view device and / PIM poll cycle statistics for their account. Device Control Require Storage Card Encryption Whether encryption of a storage card is required Device Cleanup Options Set conditions for automatic deletion of Device Cleanup Options Locked BB Allow Browser Allow Consumer Allow Bluetooth Allow Pocket IE; does not affect 3 rd party browsers Allow configuration of a personal account Enable/disable ability to use Bluetooth connections Use Trash Folder Move deleted to trash or remove from device Use Trash Folder Locked Track Sent Items Place items and commands originating on device in Sent Items folder Track Sent Items Locked Unapproved In ROM Application List Approved Application List List applications that cannot be run in ROM List of applications allowed on the device File List Frequency Sends list of the applications on the device to the server - daily, weekly, or monthly File List Frequency Locked Allow WiFi Allow Text Messaging Allow POP IMAP Allow IrDA Allow Storage Card Allow Camera Enable/disable ability to use WiFi connections Enable/disable ability to text from device Enable/disable ability to define POP/IMAP account on device Enable/disable whether infrared connections are allowed to the mobile device Enable/disable ability to have storage card access Enable/disable ability to use device camera enforces memory availability Require Device Encryption Encryption of data at rest on device * Document Last Updated 01/15/15 GO!NotifyLink for BlackBerry Application 7

8 *v4.7 GO!NotifyLink data only Allow Unsigned Applications Allow Unsigned Installation Packages Miscellaneous Device Policy Refresh Interval List of unsigned applications allowed on device List of unsigned installation packages allowed on the device Retrieves and implements on the device, any policy changes made on the server; occurs every time device syncs BB Document Last Updated: 01/15/15 GO!NotifyLink for BlackBerry Application 8

9 GO!NotifyLink ActiveSync Solution Devices = Supported = Future Release: Limitations may exist depending on operating environments Symbian S60 Knowledge-base (KB) Article Native Knowledge-base (KB) Articles Index of Native Known Issues by Device Feature/Policy Description ios4 Devices Windows M o b i l e w e b O S w i t h TouchDown A n d r o i d N a t i v e Symbian S60, 3 rd Edition WP7 BlackBerry 10 Security Allows only secure provisionable devices Enforce ActiveSync Policies Only secure provisionable models are supported If this setting is disabled, policies will not be sent to the device. (NLES v4.6.1 or higher) Note: ActiveSync policy support varies by device. KB #11 Password Locked (Always on for AS devices when ActiveSync Policies are enforced) Allow Simple Password Allows a password with a repeating character pattern. Require Alphanumeric Password Requires a password containing both alphabetic and numeric characters. Set a minimum number of complex characters. Document Last Updated 01/15/15 GO!NotifyLink ActiveSync Solution Devices 9

10 Minimum Password Length Minimal Password Require and set a minimum password length from 2 to 8 characters. Allows a minimal password composed of 4 characters. (Controlled via the Password Length setting.) Device Password Expiration Set # of days before password expires Device Password Expiration (Always on for AS devices when ActiveSync Locked Policies are enforced) Device Password History Device Password History Locked Maximum Inactivity Timeout Challenge Timeout Prevents user from reusing passwords too soon (Always on for AS devices when ActiveSync Policies are enforced) Maximum value, in minutes, to which the Inactivity Timeout may be set on the device. *ios devices are preset with a 5 minute maximum. Timeout lock regardless of activity; challenges use of device if lost or stolen * Challenge Timeout Locked Password Echo Unmasks the last password typed to expose user entry error Password Echo Locked Wipe on Failed Unlock Attempts Maximum number of failed unlock attempts before device wipe * Limited functionality - documentation. * Wipe on Failed Unlock Attempts Locked Duress Notification (Always on for AS devices when ActiveSync Policies are enforced) If compromised, user activates the duress notification by entering unlock password in an altered format Duress Notification Locked Lock Message Determine what message displays when a lock is imposed Lock Message Locked Document Last Updated: 01/15/15 GO!NotifyLink ActiveSync Solution Devices 10

11 Remote Lock Remote Wipe Device Password Enabled Device Encryption AES All Message Content TDES All Message Content Administrator can initiate lock on device from remote location Administrator can initiate data wipe on device from remote location *Limited functionality - documentation Enable/disable password lock Encryption of data stored on device *Always on for iphone 3GS & 4; ipad touch3rd & 4 th Gen.; and ipad ** WM 6.1/6.5 only Supported encryption protocol for data-inmotion Supported encryption protocol for data-inmotion Supported encryption protocol for data-inmotion *Defined on device * * Document Last Updated 01/15/15 GO!NotifyLink ActiveSync Solution Devices 11 * ** * * * * * * SSL All Message Content Compress Transmitted Message Compression of traffic to/from the device Attachments Enabled ios4 WM AS webos TouchDown Native S60, 3 WP7 Enable/disable attachment sync (Always enabled for ActiveSync devices) Max Attachment Size Limits attachment size Send Recipient Type Choose whether or not to include Recipient type on the notification if the user is listed in the CC: or BCC: field Send List of Recipients Choose whether or not to include a list, in addition to the original , showing addresses of TO: and CC: recipients Sync Reads Choose whether or not to include synchronize message status changes from the device Sync Reads Locked Sync Deletes Sync Deletes Locked Enable Smart Read Status Enable Smart Deletes Synchronize All Mail Choose whether or not to include synchronize message status changes from the device Prevents sync of message read before device has retrieved it from the server Prevents sync of message deleted before device has retrieved it from the server Choose whether all messages (read and unread) or only new unread mail is sent to BlackBerry 10

12 device Choose whether or not to include Synchronize Message synchronize message status changes from Changes the server Amount of time a message is available for replies/forwards from the device Message Availability * Set on the device * * * * * * * Limit quantity of the message body pulled from the server * Enforces the value sent from device, but is * Smart Retrieval limited by Smart Retrieval size. Allow HTML HTML s sent intact to the device *Requires NLES version 4.7 * * Disable (Notification ON/OFF) Enable/disable processing Track Notifications Track notifications for every PIM addition/change/deletion and synchronized from server to device. Notifications stored in the Sent Items folder on the groupware account. Track every sent from the device. Tracked is stored in the Sent Items Track Device Mail folder on the groupware account. Allows folders selected for monitoring to be mirrored on the device. Enable Folder Mirroring (Always enabled for ActiveSync devices) Replies to users messages contain the original message body in the notification. Include Response History Include defined signature on messages sent from the device. Signature * Defined on device * * * * * * * Filters Filter which messages are sent to the device PIM ios4 WM AS webos TouchDown Document Last Updated: 01/15/15 GO!NotifyLink ActiveSync Solution Devices 12 Native S60, 3 WP7 Disable PIM Enable/Disable PIM processing Enable/Disable contact sync from server to Sync Contacts device Sync Contacts Locked Choose Address Books Sync Calendar Sync Calendar Locked Select which personal address books to synchronize to the device (For groupware servers that support multiple address books.) Enable/Disable calendar sync from server to device BlackBerry 10

13 Synchronization Range: Look Back Synchronization Range: Look Ahead Sync Tasks Sync Tasks Locked Tasks Look Ahead PIM Change Summary PIM Change Summary Locked Synchronization Pop-ups Synchronization Pop-ups Locked Allow Send Meeting Invitations Verbose Logging and PIM Push Type Settings Push Type Locked Weekday Settings Weekday Settings Locked Weekend Settings Weekend Settings Locked Notification Alert Notification Alert Locked Send Error Messages Calendar events occurring after this date are synchronized * Set on the device. Ignores the look-back from the NLES web. ** Sent from the device. Calendar events occurring before this date are synchronized * Set on the NLES web. Enable/Disable task sync from server to device *For ios supported with ios 5 or greater on NLES 4.8.x Server syncs tasks with start or due dates that fall in the look-ahead range *For ios supported with ios 5 or greater on NLES 4.8.x Sends information to the device Inbox summarizing PIM additions/changes/ deletions downloaded from the server Device shows a pop-up alert when new PIM data is synchronized (BlackBerry devices) * * ** ** ** ** ** ** * * * * * * * * Allow/disallowed sending meeting invitations to device Offers various detail levels for troubleshooting PIM processing ios4 WM AS webos TouchDown Native S60, 3 WP7 Choose Scheduled or Direct Push *Device initially chooses Direct Push * * * * * * * * Weekday push timeframes Weekend push timeframes Device shows a pop-up alert when new or PIM data is received * only Error messages sent to device if errors are encountered * BlackBerry 10 Document Last Updated 01/15/15 GO!NotifyLink ActiveSync Solution Devices 13

14 User Access (User Permissions in Client Web) Edit Notification Format Edit Calendar Sync Settings ios4 WM AS webos TouchDown Document Last Updated: 01/15/15 GO!NotifyLink ActiveSync Solution Devices 14 Native S60, 3 WP7 format and attachment descriptors Enable sync, set range, reminders, summary, etc. Edit Contact Sync Settings Enable sync, choose address books Enable sync, look ahead range *For ios supported with ios 5 or greater on Edit Task Sync Settings NLES 4.8.x Edit Control Options Messaging, tracking, and PIM options Edit Account Settings Update username/passwords associated with groupware account Edit Display Name Define the name that will display in the From: field of the sent from the user s device. Edit Sender Settings Settings for multiple devices registered to one GO!NotifyLink account. Delete Blocks Remove device issued blocks on addresses Create Filters Filter the synchronized to device Select folders to be monitored for Choose Folders synchronization Edit Security Settings Encryption type/key, Authentication password Signature included on s sent Edit Signature * Defined on device * * * * * * Edit Device Settings Device time zone, PIN, etc. Allow users to view device and / PIM View User Statistics poll cycle statistics for their account. Device Control Require Storage Card Encryption Device Cleanup Options Device Cleanup Options Locked Allow Browser Allow Consumer Allow Bluetooth Use Trash Folder Use Trash Folder Locked ios4 WM AS webos TouchDown Native S60, 3 WP7 Whether encryption of a storage card is required Set conditions for automatic deletion of Allow Pocket IE; does not affect 3 rd party browsers Allow configuration of a personal account Enable/disable ability to use Bluetooth connections Move deleted to trash or remove from device BlackBerry 10 BlackBerry 10

15 Track Sent Items Place items and commands originating on device in Sent Items folder * Track Sent Items Locked Unapproved In ROM Application List List applications that cannot be run in ROM Approved Application List List of applications allowed on the device Sends list of applications on the device to the File List Frequency server - daily, weekly, or monthly File List Frequency Locked Allow WiFi Enable/disable ability to use WiFi connections Allow Text Messaging Enable/disable ability to text from device Allow POP IMAP Enable/disable ability to define POP/IMAP account on device Allow IrDA Enable/disable whether infrared connections are allowed to the mobile device Allow Storage Card Enable/disable ability to have storage card access Allow Camera Enable/disable ability to use device camera enforces memory availability Require Device Encryption Encryption of data at rest on device Allow Unsigned Applications List of unsigned applications allowed on device Allow Unsigned Installation List of unsigned installation packages allowed Packages on the device Miscellaneous Device Policy Refresh Interval Retrieves and implements on the device, any policy changes made on the server; occurs every time device syncs ios4 WM AS webos TouchDown Native S60, 3 WP7 BlackBerry 10 Document Last Updated 01/15/15 GO!NotifyLink ActiveSync Solution Devices 15