BlackBerry® Enterprise Solution

[jwitkow1]

We're currently in the midst of PCI (payment card industry) 2.0 compliance. I need to prevent Blackberries from accessing the internal network. We have no WiFi. Currently running BES 4.1. Anyone had to do the same? This is a Windows environment with a few models of Curves.

Thanks,

[knottyrope]

I have seen a few.

If you have dedicated exchange and Domain controllers.

Bolck access to all other servers via firewall.

Turning of MDS CS service will also prevent access, but will stop internet access as well.

You can have them change their default browser to allow them to use their carrier instead of BES for internet access.

KB16463 - How to change the default browser on a BlackBerry smartphone

[jwitkow1]

Yes, I have considered both options. However, Intenet access via carrier is necessary as many travellers tether for Internet access. Now, the firewall rule - "block all other access to servers" - is this to/from the BES server? Can you give me kind of a sanitary example? I have some users that have even downloaded something like an SSH app to log into servers. I want to block ports 21,22,23,80, 8080, 443, 8443 and maybe others.

Thanks,

Jeff