Security Basics: RE: Blackberry Security concerns

["Nicholas Timperio" <ntimperio () hitechnique com>]

Just found this @stake assessment:

http://www.blackberry.com/knowledgecenterpublic/livelink.exe/fetch/2000/
645094/An_ () stake_Security_Assessment pdf

Which says not to deploy in a DMZ.  Thanks!

- Nicholas
 
-----Original Message-----
From: Nicholas Timperio 
Sent: Thursday, April 14, 2005 9:10 AM
To: security-basics () securityfocus com
Subject: Blackberry Security concerns

Security-Basics -

We have a client that is thinking about having Blackberry Enterprise
Server installed on their Small Business Server.  My first thought is,
since this requires punching a hole through the firewall that we do not
have an application layer proxy for, that this should exist on a
demilitarized zone.  Has anyone deployed the Blackberry Enterprise
Server in a manner that they felt was secure?  If so, what was done.

Thanks,

- Nicholas

---------------------------------------------------------------------------
Earn your MS in Information Security ONLINE
Organizations worldwide are in need of highly qualified information security
professionals.  Norwich University is fulfilling this demand with its MS in
Information Security offered online.  Recognized by the NSA as an
academically excellent program, NU offers you the opportunity to earn your
degree without disrupting your home or work life.

http://www.msia.norwich.edu/secfocus_en
----------------------------------------------------------------------------