Device IT Policy Comparison

Feature/Policy

Description

BlackBerry

iPhone

Palm OS

Symbian S60, 3^rd Edition

Windows Mobile

Security

Allows only secure provisionable devices

Only secure provisionable models are supported

X

X

X

X

X

Password Locked

Administrator can lock setting

X

X

X

X

X

Password Strength

Password  must meet character pattern requirements (4 strength levels)
* Has 2 strength levels (Weak and Strong)

X

X

X

X

X

Password Strength Locked

Administrator can lock setting

X

X

X

X

Minimum Password Length

Minimum of 8 characters required for passwords

X

X

X

X

X

Device Password Expiration

Set # of days before password expires

X

X

X

X

Device Password Expiration Locked

Administrator can lock setting

X

X

X

X

Device Password History

Prevents user from reusing passwords too soon

X

X

X

X

Device Password History Locked

Administrator can lock setting

X

X

X

X

Inactivity Timeout

Set # of minutes before the device locks, due to inactivity

* Set on device using  Auto-Lock: 1 to 5 minutes

X

X*

X

X

X

Inactivity Timeout Locked

Administrator can lock setting

X

X

X

X

Challenge Timeout

Timeout lock regardless of activity; challenges use of device if lost or stolen

X

X

X

X

Challenge Timeout Locked

Administrator can lock setting

X

X

X

X

Password Echo

Unmasks the last password typed to expose user entry error

X

X

X

Password Echo Locked

Administrator can lock setting

X

X

X

Wipe on Failed Unlock Attempts

Maximum number of failed unlock attempts before device wipe
* Does not wipe data.  Instead, device is locked requiring reauthorization through iTunes

X

X

X

X

Wipe on Failed Unlock Attempts Locked

Administrator can lock setting

X

X

X

Duress Notification

If compromised, user activates the duress notification by entering unlock password in an altered format

X

X

X

Duress Notification Locked

Administrator can lock setting

X

X

X

Lock Message

Determine what message displays when a lock is imposed

X

X

X

X

Lock Message Locked

Administrator can lock setting

X

X

X

X

Remote Lock

Administrator can initiate lock on device from remote location

X

X

X

X

Remote Wipe

Administrator can initiate data wipe on device from remote location

X

X

X

X

X

Device Password Enabled  

Enable/disable password lock

X

X

X

X

X

Device  Encryption

Encryption of data stored on device

‡

‡

‡

AES All Message Content

Supported encryption protocol for data-in-motion

X

X

X

X

TDES All Message Content

Supported encryption protocol for data-in-motion

X

X

X

X

SSL All Message Content

Supported encryption protocol for data-in-motion

*Defined on device

X

X*

X

X

X

Compress Transmitted Message

Compression of traffic to/from the device

‡

X

‡

‡

Email

Attachments Enabled

Enable/disable attachment sync

X

X

X

X

Max Attachment Size

Limits attachment size

X

X

X

X

Include Sender's Name / Address

Choose whether or not  to include Name and email address of who sent the email

X

X

X

X

Include Subject

Choose whether or not  to include Subject of the email

X

X

X

X

Include Date

Choose whether or not  to include Date email was received on the server

X

X

X

X

Include Time

Choose whether or not  to include Time email was received on the server

X

X

X

X

Send Recipient Type

Choose whether or not  to include Recipient type on the email notification if the user is listed in the CC: or BCC: field

X

X

X

X

Send List of Recipients

Choose whether or not  to include a list, in addition to the original email, showing email addresses of TO: and CC: recipients

X

X

X

X

Sync Reads

Choose whether or not  to include synchronize message status changes from the device

X

X

X

X

Sync Reads Locked

Administrator can lock setting

X

X

X

X

Sync Deletes

Choose whether or not  to include synchronize message status changes from the device

X

X

X

X

Sync Deletes Locked

Administrator can lock setting

X

X

X

X

Enable Smart Read Status

Prevents sync of message read before device has retrieved it from the server

X

X

X

X

Enable Smart Deletes

Prevents sync of message deleted before device has retrieved it from the server

X

X

X

X

Synchronize All Mail

Choose whether all messages (read and unread) or only new unread mail is sent to device

X

X

X

X

X

Synchronize Message Changes

Choose whether or not  to include synchronize message status changes from the server

X

X

X

X

X

Message Availability

Amount of time a message is available for replies/forwards from the device

* Set on the device using  “Mail days to sync” option

X

*

X

X

X

Smart Retrieval

Limit quantity of the email message body pulled from the server

* Enforces the value sent from device, but is limited by Smart Retrieval size

X

X*

X

X

X

Allow HTML Email

HTML emails sent intact to the device

‡

X

‡

‡

Disable Email (Notification ON/OFF)

Enable/disable Email processing

X

X

X

X

X

Track Notifications

Track notifications for every PIM addition/change/deletion and Email synchronized from server to device.  Notifications stored in the Sent Items folder on the groupware account.

X

X

X

X

Track Device Mail

Track every Email sent from the device.  Tracked Email is stored in the Sent Items folder on the groupware account.

X

X

X

X

X

Enable Folder Mirroring

Allows email folders selected for monitoring to be mirrored on the device

X

X

X

X

X

Include Response History

Replies to users’ messages contain the original message body in the notification.

X

X

X

X

Signature

Include defined signature on messages sent from the device.

* Defined on device

X

*

X

X

X

Filters

Filter which messages are sent to the device

X

X

X

X

X

PIM

Disable PIM

Enable/Disable PIM processing

X

X

X

X

X

Sync Contacts

Enable/Disable contact sync from server to device

X

X

X

X

X

Sync Contacts Locked

Administrator can lock setting

X

X

X

X

Choose Address Books

Select which personal address books to synchronize to the device

(For groupware servers that support multiple address books.)

X

X

X

X

X

Sync Calendar

Enable/Disable calendar sync from server to device

X

X

X

X

X

Sync Calendar Locked

Administrator can lock setting

X

X

X

X

Synchronization Range: Look Back

Calendar events occurring after this date are synchronized

* Set on the device.  Ignores the look-back from the NLES web.

X

X*

X

X

X

Synchronization Range: Look Ahead

Calendar events occurring before this date are synchronized

* Set on the NLES web.

X

X*

X

X

X

Sync Tasks

Enable/Disable task sync from server to device

X

X

X

X

Sync Tasks Locked

Administrator can lock setting

X

X

X

X

Tasks Look Ahead

Server syncs tasks with start or due dates that fall in the look-ahead range

X

X

X

X

PIM Change Summary

Sends information to the device Inbox summarizing PIM additions/changes/ deletions downloaded from the server

X

X

X

X

PIM Change Summary Locked

Administrator can lock setting

X

X

X

X

Synchronization Pop-ups

Device shows a pop-up alert when new PIM data is synchronized (BlackBerry devices)

X

X

X

X

Synchronization Pop-ups Locked

Administrator can lock setting

X

X

X

X

Allow Send Meeting Invitations

Allow/disallowed sending meeting invitations to device

X

X

X

X

X

Verbose Logging

Offers  various detail levels for troubleshooting PIM processing

X

X

X

X

X

Email and PIM

Push Type Settings

Choose Scheduled or Direct Push

*Supports both push modes.  Device initially chooses Direct Push

X

X*

X

X

X

Push Type Locked

Administrator can lock setting

X

X

X

X

Weekday Settings

Weekday push timeframes

X

X

X

X

Weekday Settings Locked

Administrator can lock setting

X

X

X

X

Weekend Settings

Weekend push timeframes

X

X

X

X

Weekend Settings Locked

Administrator can lock setting

X

X

X

X

Notification Alert

Device shows a pop-up alert when new email or PIM data is received

X

X

X

X

Notification Alert Locked

Administrator can lock setting

X

X

X

X

Send Error Messages

Error messages sent to device if errors are encountered

X

X

X

X

User Access (User Permissions in Client Web)

Edit Notification Format

Email format and attachment descriptors

X

X

X

X

Edit Calendar Sync Settings

Enable sync, set range, reminders, summary, etc.

X

X

X

X

X

Edit Contact Sync Settings

Enable sync, choose address books

X

X

X

X

X

Edit Task Sync Settings

Enable sync, look ahead range

X

X

X

X

Edit Control Options

Messaging, tracking, and PIM options

X

X

X

X

X

Edit Account Settings

Update username/passwords associated with groupware account

X

X

X

X

X

Delete Blocks

Remove device issued blocks on email addresses

X

X

X

X

Create Filters

Filter the email synchronized to device

X

X

X

X

X

Choose Folders

Select Email folders to be monitored for synchronization

X

X

X

X

X

Edit Security Settings

Encryption type/key, Authentication password

X

X

X

X

X

Edit Signature

Signature included on Emails sent

* Defined on device

X

*

X

X

X

Edit Device Settings

Device time zone, PIN, etc.

X

X

X

X

X

Device Control

Require Storage Card Encryption  

Whether encryption of a storage card is required

‡

‡

‡

Device Cleanup Options

Set conditions for automatic deletion of email

X

X

X

X

Device Cleanup Options Locked

Administrator can lock setting

X

X

X

X

Allow Browser

Allow Pocket IE; does not affect 3^rd party browsers

‡

‡

‡

Allow Consumer Email

Allow configuration of a personal email account

‡

‡

‡

Allow Bluetooth

Enable/disable ability to use Bluetooth connections

‡

‡

‡

Use Trash Folder

Move deleted email to trash or remove from device

X

X

X

X

Use Trash Folder Locked

Administrator can lock setting

X

X

X

X

Track Sent Items

Place items and commands originating on device in Sent Items folder

X

X

X

X

Track Sent Items Locked

Administrator can lock setting

X

X

X

X

Unapproved In ROM Application List

List applications that cannot be run in ROM

‡

‡

‡

Approved Application List

List of applications allowed on the device

‡

‡

‡

File List Frequency

Sends list of the files on device to the server - daily, weekly, or monthly

X

X

X

X

File List Frequency Locked

Administrator can lock setting

X

X

X

X

Allow WiFi

Enable/disable ability to use WiFi connections

‡

‡

‡

Allow Text Messaging

Enable/disable ability to text from device

‡

‡

‡

Allow POP IMAP Email

Enable/disable ability to define POP/IMAP account on device

‡

‡

‡

Allow IrDA

Enable/disable whether infrared connections are allowed to the mobile device

‡

‡

‡

Allow Storage Card

Enable/disable ability to have storage card access

‡

‡

‡

Allow Camera

Enable/disable ability to use device camera – enforces memory availability

‡

‡

‡

Require Device Encryption

Encryption of data at rest on device

‡

‡

‡

Allow Unsigned Applications

List of unsigned applications allowed on device

‡

‡

‡

Allow Unsigned Installation Packages

List of unsigned installation packages allowed on the device

‡

‡

‡

Miscellaneous

Device Policy Refresh Interval

Retrieves and implements on the device, any policy changes made on the server; occurs every time device syncs

X

X

X

X