[tcericks]

We have a BES (4.1.3) on Exchange and it has been asked to allow webmail (AOL and Hotmail) on the devices. We do not want to allow webmail on the devices because it is not scanned by our internal controls. I know BES policy doesn't block mail being sent to the device but only messages being sent with webmail accounts (users can go online and set it up). After more research and how the blackberry handles attachments, I do not see much risk with webmail accounts being pushed to the device while being part of our BES. Should we keep the policy of no webmail? Thanks

[BBAdmin]

It's a difficult one, but while I don't allow it (because I give my users BlackBerrys for work not so they can send Hotmail all day long) I don't think I'd disallow it because of security worries.

[packetknife]

As long as RIM keeps centrally stripping and simplifying messages I'd say it'd be OK. But the instant it starts allowing support of Javascript, etc. then I'd be more technically concerned.

Another concern to consider is if you have email compliance tools on your regular BES/Exchange/SMTP chain. If you do you might consider allowing them to check webmail but only send out via 'Desktop' service to make sure all the email goes out through your compliance systems.

-Pk

[packetknife]

As long as RIM keeps centrally stripping and simplifying messages I'd say it'd be OK. But the instant it starts allowing support of Javascript, etc. then I'd be more technically concerned.

Another concern to consider is if you have email compliance tools on your regular BES/Exchange/SMTP chain. If you do you might consider allowing them to check webmail but only send out via 'Desktop' service to make sure all the email goes out through your compliance systems.

-Pk