Sign in
Microsoft.com
 
System Center Mobile Device Manager TechCenter
 
 
 
System Center Mobile Device Manager TechCenter > Mobility Forums > System Center Mobile Device Manager > Email Filtering Feature For SCMDM
Ask a questionAsk a question
Search Forums:
 

AnswerEmail Filtering Feature For SCMDM

  • Wednesday, October 28, 2009 8:50 AMWindCloud Users MedalsUsers MedalsUsers MedalsUsers MedalsUsers Medals
     
    Sign In to Vote
    0
    Sign In to Vote
    Hi,

    Is there any way to filter "encrytped" email messages from MDM server before it send to the mobile device user? 

    Thanks.
    KC
     

Answers

  • Friday, October 30, 2009 5:10 AMWayne Phillips.MVP, ModeratorUsers MedalsUsers MedalsUsers MedalsUsers MedalsUsers Medals
     Answer
    Sign In to Vote
    0
    Sign In to Vote

    Does this third party email tool have EAL4+ security classification? Windows Mobile 6.1 and SCMDM2008 has recently been awarded the EAL4+ Common Criteria Security Classification. You might want to rethink you view of Windows Mobile and MDM security, and allow these email to reside on the devices. Check out the DSD Evaluation Document.

    Cheers Wayne
    Airloom

     
  • Sunday, November 01, 2009 8:16 PMAndreas Helland Users MedalsUsers MedalsUsers MedalsUsers MedalsUsers Medals
     Answer
    Sign In to Vote
    0
    Sign In to Vote
    Your device will request all mail in the user's mailbox once a partnership with Exchange is established. Since the contents of the encrypted mail are just that, encrypted, there isn't an easy way to flag them as "non-pushable". If the device doesn't have the certificate installed it will not be able to read the mail, but it will probably pop up in the inbox in some unreadable form. (I have not tested a scenario like this, so I wouldn't know.)

    If you wanted to prevent it from being synced you'd have to code custom plugins for your Exchange server, and while this can be entertaining, I don't think I'd recommend it.

    Secure and lock down your mobile devices, and it should be of no great worry that they are able to sync the email. (If it's really sensitive mail maybe it should be in a separate mailbox or something similar on the Exchange server?)
     

All Replies

  • Wednesday, October 28, 2009 9:12 PMAndreas Helland Users MedalsUsers MedalsUsers MedalsUsers MedalsUsers Medals
     
    Sign In to Vote
    0
    Sign In to Vote
    Not sure what you mean by "encrypted" mail. Mail flow in ActiveSync is strictly between the Exchange server and the ActiveSync client. SCMDM is not able to alter this traffic. SCMDM is able to apply policies regarding ActiveSync though, but I don't believe there's any policies for filtering the mail itself.
     
  • Wednesday, October 28, 2009 11:47 PMWayne Phillips.MVP, ModeratorUsers MedalsUsers MedalsUsers MedalsUsers MedalsUsers Medals
     
    Sign In to Vote
    0
    Sign In to Vote

    I don't think I fully understand what you are asking. What are you trying to achieve ? Is this in response to a corporate policy ? If you can outline the policy, we can try and help you comply with it.

     

    Cheers Wayne

    Airloom

     
  • Friday, October 30, 2009 3:35 AMWindCloud Users MedalsUsers MedalsUsers MedalsUsers MedalsUsers Medals
     
    Sign In to Vote
    0
    Sign In to Vote
    Hi,

    First, thanks for reply.  My scenario as follow:

    For certain Exchange email users from my company are using a third party encrytped method for some confidential email.  When they send this type of encrypted email, they need to use a smartcard with certificate installed for authentication.  So,   from company policy prospective, these type of encrypted email should not allow to push to the user mobile device inbox.  Hence, I would like to know if there is any way to filter out this encrypted email before it push to the user mobile device?

    Cheers,
    KC
     
  • Friday, October 30, 2009 5:10 AMWayne Phillips.MVP, ModeratorUsers MedalsUsers MedalsUsers MedalsUsers MedalsUsers Medals
     Answer
    Sign In to Vote
    0
    Sign In to Vote

    Does this third party email tool have EAL4+ security classification? Windows Mobile 6.1 and SCMDM2008 has recently been awarded the EAL4+ Common Criteria Security Classification. You might want to rethink you view of Windows Mobile and MDM security, and allow these email to reside on the devices. Check out the DSD Evaluation Document.

    Cheers Wayne
    Airloom

     
  • Sunday, November 01, 2009 8:16 PMAndreas Helland Users MedalsUsers MedalsUsers MedalsUsers MedalsUsers Medals
     Answer
    Sign In to Vote
    0
    Sign In to Vote
    Your device will request all mail in the user's mailbox once a partnership with Exchange is established. Since the contents of the encrypted mail are just that, encrypted, there isn't an easy way to flag them as "non-pushable". If the device doesn't have the certificate installed it will not be able to read the mail, but it will probably pop up in the inbox in some unreadable form. (I have not tested a scenario like this, so I wouldn't know.)

    If you wanted to prevent it from being synced you'd have to code custom plugins for your Exchange server, and while this can be entertaining, I don't think I'd recommend it.

    Secure and lock down your mobile devices, and it should be of no great worry that they are able to sync the email. (If it's really sensitive mail maybe it should be in a separate mailbox or something similar on the Exchange server?)
     
  • Monday, November 02, 2009 3:57 AMWindCloud Users MedalsUsers MedalsUsers MedalsUsers MedalsUsers Medals
     
    Sign In to Vote
    0
    Sign In to Vote
    Thanks to Wayne and Andreas for the information.  Will work on the from the Exchange server side.