Specifications

Managing data transferred to and from a device using NFC

Data that a BlackBerry Balance device running BlackBerry 10 receives from another device using NFC is generally

classified as personal data. However, if a work app supports a specific NFC tag format that is unique to the work app, any

data that the device receives with that NFC tag is classified as work data.

By default, devices can use NFC to send work data to other NFC-enabled devices. You can prevent users from sharing work

data in a file format (for example, pictures or documents) using NFC by setting the "Transfer Work Files Using Bluetooth

OPP" IT policy rule to Disallow. Regardless of how this IT policy rule is set, devices can use NFC to send certain MIME or

URI data types, such as web addresses and phone numbers to other NFC-enabled devices.

Managing cloud storage apps in the work space on devices

BlackBerry Balance devices running BlackBerry 10 support cloud storage apps in both the work space and the personal

space on devices. By default, users can use cloud storage apps developed by Research In Motion, such as Box and

Dropbox, in the work space on devices. After users log into a cloud storage app in the work space on devices, that cloud file

storage is available as a storage option in the work space and the cloud storage app stores its settings and data in the work

space file system. Users can then read, write, move, and update data to that location.

You can prevent cloud storage apps from being available in the work space on devices by setting the "Cloud Storage

Access from Work Space" IT policy rule to Disallow so that users can then use these apps only in the personal space on

devices.

Transferring work data from devices using Bluetooth

Using Bluetooth wireless technology, users can open wireless connections between a BlackBerry Balance device running

BlackBerry 10 OS and other Bluetooth enabled devices. Users must request a pairing with another Bluetooth device and

use a passkey to complete the pairing. BlackBerry 10 devices prompt users each time another Bluetooth enabled device

tries to connect to their devices.

By default, users can transfer files, contacts, and messages from the work space on BlackBerry 10 devices to Bluetooth

enabled devices that they have successfully paired with.

You can use the following IT policy rules to prevent users from transferring work data to other Bluetooth enabled devices:

• Transfer Work Files Using Bluetooth OPP

• Transfer Work Contacts Using Bluetooth PBAP and HFP

• Transfer Work Messages Using Bluetooth MAP

Devices use the Bluetooth OPP to send objects to another Bluetooth enabled device. To prevent a user from using the

Bluetooth OPP to send work files and objects such as contacts to another Bluetooth enabled device, you can set the

"Transfer Work Files Using Bluetooth OPP" IT policy rule to Disallow. Devices also use the Bluetooth OPP to share work

data in a file format (for example, pictures or documents) using NFC. When the "Transfer Work Files Using Bluetooth OPP"

IT policy rule is set to Disallow, users cannot share work data in a file format using NFC.

Devices use the Bluetooth PBAP and the Bluetooth HFP to send contacts to another Bluetooth enabled device. To prevent

a user from using the Bluetooth PBAP and the Bluetooth HFP to send work contacts to another Bluetooth enabled device,

you can set the "Transfer Work Contacts Using Bluetooth PBAP or HFP" IT policy rule to Disallow. If you set this rule to

Disallow, devices also cannot use the Bluetooth MAP to send work messages to another Bluetooth enabled device.

Security Technical

Overview

Using BlackBerry Balance to secure BlackBerry 10 devices in your organization’s environment for work

use and personal use