RE: Blackberry Security concerns

["Beauford, Jason" <jbeauford () EightInOnePet com>]

I recently deployed BES 4.0.  Unless your are performing egress
filtering, there are no modifications required to your firewall.  And if
you are, then there is a specific site the BES needs to connect to which
you can allow for.

The product is quite amazing as everything sync's up wirelessly. Only
minor configurations are required and most can be setup via a Policy
which is transmitted wirelessly as well.

BES Servers need to communicate to your Exchange server and monitor the
mailboxes specified.  As DMZ's do not allow DMZ => LAN communication
(but rather DMZ <= LAN) a BES in the DMZ is not possible/recommended.
In fact, Blackberry/RIM recommend against it.

I am satisifed with the security of my installation.

-JMB

-----Original Message-----
From: Nicholas Timperio [mailto:ntimperio () hitechnique com] 
Sent: Thursday, April 14, 2005 12:10 PM
To: security-basics () securityfocus com
Subject: Blackberry Security concerns


Security-Basics -

We have a client that is thinking about having Blackberry Enterprise
Server installed on their Small Business Server.  My first thought is,
since this requires punching a hole through the firewall that we do not
have an application layer proxy for, that this should exist on a
demilitarized zone.  Has anyone deployed the Blackberry Enterprise
Server in a manner that they felt was secure?  If so, what was done.

Thanks,

- Nicholas

------------------------------------------------------------------------
---
Earn your MS in Information Security ONLINE
Organizations worldwide are in need of highly qualified information
security 
professionals.  Norwich University is fulfilling this demand with its MS
in 
Information Security offered online.  Recognized by the NSA as an 
academically excellent program, NU offers you the opportunity to earn
your 
degree without disrupting your home or work life.

http://www.msia.norwich.edu/secfocus_en
------------------------------------------------------------------------
----


---------------------------------------------------------------------------
Earn your MS in Information Security ONLINE
Organizations worldwide are in need of highly qualified information security
professionals.  Norwich University is fulfilling this demand with its MS in
Information Security offered online.  Recognized by the NSA as an
academically excellent program, NU offers you the opportunity to earn your
degree without disrupting your home or work life.

http://www.msia.norwich.edu/secfocus_en
----------------------------------------------------------------------------