BlackBerry Forums Support Community

warwro · 10-27-2011, 07:32 PM

Hi,

I heard BES is much more secure than BIS. So I would like to use it for my Google Apps account (Gmail) and to surf the internet. We are small campany and having own server, buying license is expensive and complicated. I heard about Hosted BlackBerry Services (us.blackberry.com/apps-software/hosted/). Can someone tell me if this will be suitable? Maybe you can suggest something else?

dc/dc · 10-27-2011, 07:52 PM

Hosted BES will be no more secure than BIS. Also, since you're using Google Apps, even using your own BES wouldn't be any more secure since all of your messages would still process through Google's servers.

warwro · 10-28-2011, 04:20 AM

I thought with Hosted BlackBerry Services all internet traffic (email, instant messangers etc.) will be encrypted like in this image: bbnews.pl/wp-content/uploads/2010/08/bis_diagram.jpg

Standard BIS works like in this image:
bbnews.pl/wp-content/uploads/2010/08/bis_diagram.jpg

So which version do I get with Hosted BlackBerry Services?

dc/dc · 10-28-2011, 07:03 AM

Quote:

Originally Posted by warwro

I thought with Hosted BlackBerry Services all internet traffic (email, instant messangers etc.) will be encrypted like in this image: bbnews.pl/wp-content/uploads/2010/08/bis_diagram.jpg

Standard BIS works like in this image:
bbnews.pl/wp-content/uploads/2010/08/bis_diagram.jpg

So which version do I get with Hosted BlackBerry Services?

It's encrypted, but no more secure because of the reasons I mentioned above. Encryption is not the only piece that makes BES secure.

hrbuckley · 10-28-2011, 07:46 AM

Communication between a BlackBerry smartphone and the BES server is encrypted and secure. With a hosted solution the data is then on the hosting company's network. So it comes down to whether or not you trust the hosting company to protect that data adequately. All communications between the hosting server and other servers on the internet may or may not be encrypted. Google supports TLS encryption of email, but you don't say if the hosting service you're contemplating does.

For a complete description of BlackBerry security see this page, but remember that for a hosted BES solution, the corporate servers belong to the hosting company.

warwro · 10-28-2011, 09:11 AM

Quote:

Originally Posted by dc/dc

It's encrypted, but no more secure because of the reasons I mentioned above. Encryption is not the only piece that makes BES secure.

With BIS I don't get encryption available for BES (AES or Triple DES) and all data are hosted by my carrier? Is this correct?

dc/dc · 10-28-2011, 10:32 AM

Quote:

Originally Posted by warwro

With BIS I don't get encryption available for BES (AES or Triple DES) and all data are hosted by my carrier? Is this correct?

You're already using a less-secured form of e-mail by using Google, so I'm still just not sure what you're trying to accomplish. BIS won't lessen your security.

Honestly, since you're using Google and obviously not concerned with cloud storage security, I would recommend using Android phones. That way, you will have no "middle-man" between your devices and Google.

warwro · 10-28-2011, 11:45 AM

I would like to secure all my internet traffic from my carrier.

I'm not sure but If I use BES I will be double secured while using Google Apps, cause my connection will be encrypted by BES (AES or Triple DES) and standard SSL/TSL?

dc/dc · 10-28-2011, 05:29 PM

Quote:

Originally Posted by warwro

I would like to secure all my internet traffic from my carrier.

I'm not sure but If I use BES I will be double secured while using Google Apps, cause my connection will be encrypted by BES (AES or Triple DES) and standard SSL/TSL?

You're not listening to me, so I don't think I can be of any more help to you, but no, you will not be "double secured". The only sure way you can achieve the security level you desire is to host your own mail server and your own BES.