I'm hoping to get a little direction with deploying 3rd party apps through our BES. Up until now I've usually just set under Security to "Disallow Third Party Application Downloads". When I needed to push an app out (which was rare) I would set up a Software Config, change the user to an IT Policy that doesn't have "Disallow Third Party Application Downloads" set to yes then changed back when done.

For some reason I've noticed in SP2 that once I change back to an IT Policy that doesn't allow 3rd party app download, the BES promptly removes the app that was pushed out with a software config.

I've been testing with using a software config disallowing unlisted apps which seems to work as stated. Also, I see under the App World tab of an IT Policy you can restrict what apps to allow or disallow which also works as stated. The problem is these two can't work together since the allowed App World apps would be unlisted under that Software Config.

I said all that to ask this. Is there a way to restrict app downloads through App World at the same time not allow any app downloads through the browser?

Thanks!

You may be able to use allow/deny pull rules to accomplish some things. I haven't tried these in conjunction with the App World IT Policies though.

.*appworld\.blackberry\..*(:\d*)?(/.*)*(\?.*)?.jad
JAD from BlackBerry App World

.*appworld\.blackberry\..*(:\d*)?(/.*)*(\?.*)?.cod
COD from BlackBerry App World

.*\..*(:\d*)?(/.*)*(\?.*)?.jad
JAD from Anywhere

.*\..*(:\d*)?(/.*)*(\?.*)?.cod
COD from Anywhere

.*\..*(:\d*)?(/.*)*(\?.*)?
All

I have tried to get this to work, and spent weeks playing around with software configs and policies, and could not get it wo work as I wanted. I then removed all of my software configs and basically just assigned a policy to the device. I then used my squid proxy servers and set up a banned list and banned all .cod .jad and .alx files from being downloaded. I then set up an allowed list of software that my users could install. I then set up an intranet page with links to allowed software. Works a treat.