OWA only through reverse proxy w/2 factor authentication.
________________________________ From: Kevin Lundy [mailto:[EMAIL PROTECTED] Sent: Friday, May 09, 2008 9:44 AM To: MS-Exchange Admin Issues Subject: Re: Personal Blackberries Do you allow OWA? If so, then a Blackberry user can sync their email. I didn't believe it either until a coworker just showed me. No BES needed, no POP, no IMAP. I only allow 443 into the OWA. It is truly synch'd too. Not just a browser view, but the email is downloaded to the device. Worse, the password is now stored on the device. On Fri, May 9, 2008 at 12:36 PM, John Cook <[EMAIL PROTECTED]> wrote: No BES account, no POP3, firewall ________________________________ From: Kevin Lundy To: MS-Exchange Admin Issues Sent: Fri May 09 12:21:25 2008 Subject: Re: Personal Blackberries So how are you blocking it? On Fri, May 9, 2008 at 12:14 PM, John Cook <[EMAIL PROTECTED]> wrote: We don't allow ANY personal device to connect to our systems for the simple reason that we have no say as to how they're configured or used. ________________________________ From: Kevin Lundy To: MS-Exchange Admin Issues Sent: Fri May 09 12:10:55 2008 Subject: Personal Blackberries I have 2 questions related to Blackberries 1) Is there an elegant way to block blackberries from accessing corporate email via OWA? I thought about urlscan to filter the user agent, but I have read that doesn't work. 2) How many people allow personal devices on their BES? If you do, does the company pay the license fee or the user. Thanks Kevin ~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~ ~ http://www.sunbeltsoftware.com/Ninja ~