User guide

Best practice Description

To apply this best practice, you can use the Firewall Block Incoming Messages

IT policy rule.

Require a user to verify whether the

user wants to send a message.

Consider configuring the device so that the user must verify whether the user

wants to send an email message, SMS text message, MMS message, or PIN

message.

To apply this best practice, you can use the Confirm on Send IT policy rule.

Turn off unsecured messaging on the

device.

Consider turning off unsecured messaging to make sure that all communication

for the device that starts in your organization travels through your organization’s

messaging environment.

To turn off SMS text messaging, you can use the Allow SMS IT policy rule.

To turn off MMS messaging, you can use the Disable MMS IT policy rule.

To turn off PIN messaging, you can use the Allow Peer-to-Peer Messages IT

policy rule. When you turn off PIN messaging, a user can receive PIN messages

on the device but cannot send PIN messages from the device.

How the BlackBerry Enterprise Server

protects connections between a device and

the Internet or intranet

A user can use the BlackBerry Browser and BlackBerry Applications on a BlackBerry device to access the Internet and

your organization’s intranet. The BlackBerry Browser and BlackBerry Java Applications can accept and respond to push

requests from push applications. The

BlackBerry Browser and BlackBerry Java Applications use the BlackBerry MDS

Connection Service to access the Internet and your organization's intranet.

To access data on the Internet or your organization’s intranet, the BlackBerry MDS Connection Service uses HTTP, TCP/IP,

and the BlackBerry MDS security protocol. The BlackBerry MDS security protocol is a Research In Motion proprietary

protocol that is designed to protect messages that the device sends using the BlackBerry MDS Connection Service. The

BlackBerry MDS Connection Service and device use BlackBerry transport layer encryption to help protect your

organization’s applications and the Internet data that a user receives on the device.

Security Technical Overview Protecting communication with a device