Guys,

After a decade of things going smoothly, we now have some InfoSec members that basically went through the IT policies and want to turn off and tighten up everything possible.

I can see our BB user count dropping already just thinking about it.

Don't get me wrong, most of our BES environments are pretty tight... But now they want to completely toss PIN messaging and tell the user to use SMS/text.

I'll go for one peer-to-peer encryption key and allowing only internal PIN, and setting the FW policy to block PIN (Public). But they are trying to can it completely.

Since they want to allow SMS then one thing is cost... We dont get unlimited text on most of our plans but with unlimited data PINs cost nothing... and they will be encrypted across the carriers network.

Any other good selling points.

Do they realise that PIN can be audited via the BES logs? Perhaps that's whythe want to can PIN messaging, and if they realise that it can be logged they'll go that route instead?

__________________
Si MCTS
Co-Owner
Port3101 - Your BES Connection

Don't forget, you can follow us on Twitter

The views expressed by me on Port3101 and its affiliated sites are my own and do not necessarily reflect the views of my employer.

what ^ said. No reason to block PIN if you limit to internal only ... audit just like sms.

__________________
http://blog.port3101.org/hdawg/

The views expressed by me on Port3101 and its affiliated sites are my own and do not necessarily reflect the views of my employer.

x3 on that opinion. Since text/sms costs money, and PIN is included in the data plan, why heap on the costs for the 'sake of security'?

__________________
You may know me as Juwaack68

If anything, I would look into the selling point of saving the company a ton of annual expenses if you adopt PIN over SMS (and simply get rid of SMS/MMS completely, blocked by the carrier).

__________________
BCSA (4.1, 5.0) | BCSD (4.1, 5.0)

The views expressed by me on Port3101.org are my own and do not necessarily reflect the views of my employer.

I have a meeting Friday with them. They are not state-side and don't fully appreciate unlimited data plans as they don't have them. They want PIN and MMS blocked but allow SMS.

As yes they are aware of auditing and specifically stated they didn't want it.

I wish you luck. Uninformed/ignorant decision makers are the worst kind of to have in charge.

__________________
You may know me as Juwaack68

Some people just don't get it. Fools.