Enterprise iPhones

[cellocello]

As an enthusiast, and not a corporate, iPhone user - even I'll concede that the iPhone doesn't feel really "ready for prime time" yet.

While the iPhone does have that "solid as a rock" vibe to the OS (sorta), it seems to allow itself to get "behind schedule", as it were, pretty easily.

I suspect we'll see big improvements once 2.1 (after 2.0.1) is released.

 

[Sky Blue]

Have you had any issues enforcing security policies on iPhones over ActiveSync? Or in other words, does security on the iPhone work as advertised here: http://www.apple.com/iphone/enterprise/integration.html

Yes, it does work as advertised.

How many man hours would be involved in gearing up to have 5 iPhones run as a test group?

Apple have some documentation on the ports/services that need to be open:

http://images.apple.com/iphone/enterprise/docs/iPhone_MS_Exchange.pdf

If you have OWA (Outlook Webmail) you should have the ports open. You'd need to install a couple of certificates. It probably took me an afternoon to get it up and running. It also depends on how large and fragmented your IT dept is. Your Exchange admin might be sitting across from the room from the guy who looks after the firewall, or they might be on the other side of the building/city/country. There really isn't a lot to do, it's just planning it out and getting the right guys to do their part.

Are there any particular stumbling blocks you ran into when rolling out iPhones?

Nope

Does syncing to Exchange act as advertised (other than mail, do calendar and contacts survive the sync intact)?

Yes, it works fine. Obviously, it'll only sync Exchange calendar/contacts, not local stuff you might have on your Mac/PC.

Short answers, long answers, any answers are appreciated. Thanks in advance.

Let me know if you have any other questions. I think the issue is non-Apple IT staff might be a bit put off by the fact it's an Apple product, but it's similar to set up if not identical to other ActiveSync devices.

 

[Echinda]

Thanks, Sky Blue.

So far, I'm hearing that it works as advertised but does not have device level encryption and a large law firm that tried it out found it to have less reliable syncing than bberries.

That's enough info to work with. Thanks to all for their input.

well ... except for the guy who didn't read the headers ... to quote the Soup Nazi: "No thanks for you."

 

[tritonj]

I'm currently trying to get my company to pilot the 3G iPhone as an optional alternative to the BlackBerry. It would be a fairly easy implementation considering we currently have AT&T as our service provider for our BlackBerry devices and we have EAS implemented.

The push back thus far, besides concerns over centralized management and security, has been the lack of MS Office Communicator (MSOC) support on the iPhone and the iPhone keypad.

We use a MSOC client on our BlackBerry devices for chat, collaboration and presence and I've been asked if the iPhone can support the same functionality. Currently, I do not believe it does.

A criticism of the iPhone keypad is that you can't really use it with your thumbs like you do a BlackBerry device. We've got hundreds of employees who have become very proficient at typing away on their BlackBerry keypads with their thumbs and there is a concern they will never be as efficient on the iPhone keypad as they are on the BlackBerry keypad.

Another criticism of the iPhone keypad is that it has no tactile feedback like there is on a BlackBerry device where you are touching and pressing actual keys and this lack of tactile feedback would lead to more typing mistakes and a loss of typing efficiency.

So I still have some challenges to overcome, but my hope is to get a few pilot 3G iPhone devices in-house, let some folks try them out first hand, see what they think and go from there.

if you already use EAS then you could probably connect up with and iPhone and they wouldn't even know unless they were checking logs

 

[wreckshop]

I have a good friend who is a lawyer that works for a fortune 500 company (which happens to be the leader in its particular industry) and he uses an iphone. It's actually quite interesting because Apple approached his company and actually gave them free or heavily discounted iphones and helped the IT department integrate them into their enterprise environment. I think most of the people in their legal department switched over to iphones. Not sure about the engineers and scientists though. This was iphone 2G btw.

Maybe you'll get lucky and Apple will come knocking on your door

 

[Auzburner]

Lockheed Martin and iPhone

This is what Lockheed Martin has to say:


iPhones for LM Business

Protection of Lockheed Martin (LM) information and computing resources is vital
to maintaining and growing Lockheed Martin’s reputation. Over the past few
months there has been an increase in requests by LM employees to purchase and
utilize the Apple iPhone for conducting LM business.

Based on a review of the commercial iPhone device, the Corporate Information Security Office (CISO) has determined the iPhone currently lacks basic security controls required by LM policy.

Current generation of iPhone is designed for consumer marketplace
Lacks basic security controls required by LM policy
Not permitted to store or transmit LM sensitive information
LM employees may use the voice capabilities of iPhones in accordance with CPS-710 and in line with local site policies regarding the use of mobile devices on-site. For more detailed information and examples on the acceptable use of iPhones within LM please see:



Apple iPhone Frequently Asked Questions
UPDATED: JULY 16, 2008
Note: The following also applies to the latest version of the iPhone.

As noted in the July 3, 2007 article Apple iPhone, Keep it at Home, the Apple iPhone lacks appropriate security controls, creating a significant security risk to the Corporation. The following FAQs on the iPhone should be helpful:

1. Why is CISO singling out the Apple iPhone?
Aggressive and successful direct-to-consumer marketing campaigns have created great demand for the Apple iPhone. The popularity of the iPhone provides us with an opportunity to reinforce the Corporation’s commitment to mobile device security. All mobile devices including but not limited to the iPhone, Palm Treo, Microsoft Mobile, and Symbian based operating systems that contain Lockheed Martin Sensitive Information must be properly secured. For information protection requirements and solutions for several different mobile devices, visit CISO Guidelines for Safe Mobile Device Use.

2. What if I want to use the iPhone for personal use?
CISO recognizes the ubiquitous nature of cell phone usage. However, some Lockheed Martin businesses do not permit personal devices to be brought on site. Please refer to the iPhone article on the Information Protection website for additional information.

3. I own a personal iPhone. Do I need to leave it home?
Each Lockheed Martin Business Unit and facility may impose specific restrictions concerning the use of personal devices on Lockheed Martin premises. If you are unsure of your Business Unit’s position, please contact your LMIPC representative.

4. Can I sync my Calendar, Inbox, address book, and iTunes music to my iPhone?
Address book entries may be synced to an iPhone provided no sensitive information is contained in the address book entry. Additionally, users that work on sensitive programs or projects should think twice before syncing their address book. In the aggregate, address book entries can provide key information to malicious individuals, organizations, and governments.

Calendar entries must not be synced to an iPhone or any other unprotected device. Calendar entries contain conference call numbers and passcodes for participants and hosts that could allow a malicious person to listen into sensitive discussions. Additionally, calendar entries may contain attachments that are sensitive in nature.

Inbox and e-mail synchronization allows mobile users to have real-time access to their Lockheed Martin e-mail accounts while away from their laptop or desktop. E-mail redirection and forwarding services provided by wireless carriers are prohibited from being used. Examples of prohibited services include, but are not limited to:

· Wireless Sync from Verizon Wireless
· Xpress Mail from Cingular/AT&T
Carrier-provided e-mail services do not provide security controls to protect Lockheed Martin Sensitive Information. Currently, the only approved method of e-mail synchronization is that provided by the RIM BlackBerry service. For more information on the BlackBerry service, visit the BlackBerry IT Services & Solutions page. Using software, such as Apple's iTunes, to purchase legal audio files for personal use on Lockheed Martin computing resources is acceptable provided that all use complies with CPS-007 Personal Use of Lockheed Martin Assets and all licensing complies with any software agreements as stated in IRM-001 Software License Agreement Compliance.

5. What is CISO doing to allow the iPhone to be used for work purposes?
CISO and CTO are working together with Apple, Inc. on two fronts. The first is to determine exactly how an iPhone can be used to support our mobile workforce while protecting Sensitive Information. Secondly, we are working with Apple, Inc. by providing them our requirements for enterprise scale usage scenarios.

 

[trs23]

We're running the iphone at my company. It's about 600 people but we aren't public or have any SOX stuff we need to worry about.

A few things that I found while using active sync:

1. The calendar isn't that great. You can't create a meeting on your phone and invite other people to it! This is a major hole in my opinion! You can accept meetings etc no problem -- although my boss lost his entire calendar when the push service freaked out! completely empty!

2. For some unexplained reason about once a day the email stops being "pushed" You have to power down your phone and then it trickles in again. for me its about 10am-11am every day without fail.

3. You can only sync one calendar. So if you have a personal calendar or whatever you're SOL. -- As far as I know. -- let me know if this is wrong!

I can't wait until 2.0.1! There's some pretty bad bugs in 2.0 that need to be sorted out. I had the blackberry for about a year at another job and it seemed the push services were way ahead of apples first attempt.

 

[branjosef]

Enterprise iphones... to boldly go where no one has gone before