Device IT Policy Comparison

Feature/Policy

Description

BlackBerry

iPhone

Palm OS

Symbian S60, 3^rd Edition

Windows Mobile

Security

Allows only secure provisionable devices

Only secure provisionable models are supported

X

X

X

X

X

Password Locked

Administrator can lock setting

X

X

X

X

X

Password Strength

Password  must meet character pattern requirements (4 strength levels)
* Has 2 strength levels (Weak and Strong)

X

‡*

‡

X

X

Password Strength Locked

Administrator can lock setting

X

‡

X

X

Minimum Password Length

Minimum of 8 characters required for passwords

X

‡

‡

X

X

Device Password Expiration

Set # of days before password expires

X

X

X

X

Device Password Expiration Locked

Administrator can lock setting

X

‡

X

X

Device Password History

Prevents user from reusing passwords too soon

X

X

X

X

Device Password History Locked

Administrator can lock setting

X

‡

X

X

Inactivity Timeout

Set # of minutes before the device locks, due to inactivity

* Set on device using  Auto-Lock: 1 to 5 minutes

X

X*

‡

X

X

Inactivity Timeout Locked

Administrator can lock setting

X

‡

X

X

Challenge Timeout

Timeout lock regardless of activity; challenges use of device if lost or stolen

X

‡

X

X

Challenge Timeout Locked

Administrator can lock setting

X

‡

X

X

Password Echo

Unmasks the last password typed to expose user entry error

X

‡

X

X

Password Echo Locked

Administrator can lock setting

X

‡

X

X

Wipe on Failed Unlock Attempts

Maximum number of failed unlock attempts before device wipe
* Does not wipe data.  Instead, device is locked requiring reauthorization through iTunes

X

‡*

‡

X

X

Wipe on Failed Unlock Attempts Locked

Administrator can lock setting

X

‡

X

X

Duress Notification

If compromised, user activates the duress notification by entering unlock password in an altered format

X

‡

X

X

Duress Notification Locked

Administrator can lock setting

X

‡

X

X

Lock Message

Determine what message displays when a lock is imposed

X

‡

X

X

Lock Message Locked

Administrator can lock setting

X

‡

X

X

Remote Lock

Administrator can initiate lock on device from remote location

X

X

X

X

Remote Wipe

Administrator can initiate data wipe on device from remote location

X

X

X

X

X

Device Password Enabled  

Enable/disable password lock

X

X

X

X

X

Device  Encryption

Encryption of data stored on device

‡

‡

‡

‡

AES All Message Content

Supported encryption protocol for data-in-motion

X

X

X

X

TDES All Message Content

Supported encryption protocol for data-in-motion

X

X

X

X

SSL All Message Content

Supported encryption protocol for data-in-motion

*Defined on device

X

X*

X

X

X

Compress Transmitted Message

Compression of traffic to/from the device

‡

X

‡

‡

‡

Email

Attachments Enabled

Enable/disable attachment sync

X

X

X

X

Max Attachment Size

Limits attachment size

X

X

X

X

Include Sender's Name / Address

Choose whether or not  to include Name and email address of who sent the email

X

X

X

X

Include Subject

Choose whether or not  to include Subject of the email

X

X

X

X

Include Date

Choose whether or not  to include Date email was received on the server

X

X

X

X

Include Time

Choose whether or not  to include Time email was received on the server

X

X

X

X

Send Recipient Type

Choose whether or not  to include Recipient type on the email notification if the user is listed in the CC: or BCC: field

X

X

X

X

Send List of Recipients

Choose whether or not  to include a list, in addition to the original email, showing email addresses of TO: and CC: recipients

X

X

X

X

Sync Reads

Choose whether or not  to include synchronize message status changes from the device

X

X

X

X

Sync Reads Locked

Administrator can lock setting

X

X

X

X

Sync Deletes

Choose whether or not  to include synchronize message status changes from the device

X

X

X

X

Sync Deletes Locked

Administrator can lock setting

X

X

X

X

Enable Smart Read Status

Prevents sync of message read before device has retrieved it from the server

X

X

X

X

Enable Smart Deletes

Prevents sync of message deleted before device has retrieved it from the server

X

X

X

X

Synchronize All Mail