BES Policies!

[Khurram]

Hi Guys;

Is there any policy/rule available in BES which we can implement to block specific website. Is there any than please tell me how we implement.

And the second thing is that where we check logs for a specific users and the whole users.

Thank you.

[GaryCutri]

How to set up Pull Authorization to grant or restrict access to specific web sites on the BlackBerry Browser

Doc ID : KB10342
Last Modified : 12-02-2008
Document Type : Support

Environment

• BlackBerry® Enterprise Server software versions 4.0 and 4.1 for IBM® Lotus® Domino®
• BlackBerry® Enterprise Server software versions 4.0 and 4.1 for Microsoft® Exchange

Overview

The BlackBerry® Mobile Data Service, used in BlackBerry Enterprise Server software version 4.0, and the BlackBerry® Mobile Data System (BlackBerry® MDS) Connection Service, used in BlackBerry Enterprise Server software version 4.1, can be configured to allow or block access to specific web sites based on roles defined in the Access Control List by system administrators. A role or rule may prevent or grant access to BlackBerry smartphone users from viewing certain web sites in the BlackBerry® Browser.

To configure the pull authorization, complete the following tasks in BlackBerry Manager.

For BlackBerry Enterprise Server software version 4.0

Task 1

Create Pull Roles.

1. In the left pane, select BlackBerry Domain.
2. On the Global tab, click Edit Properties.
3. Select MDS Access Control.
4. Double-click Pull Roles, and then click New.
5. In the Name field, type the new role name.
6. In the Description field, type the role description.
7. Click OK.

Task 2

Map the BlackBerry smartphone users to Pull Roles.

1. In the left pane, select BlackBerry Domain.
2. On the Global tab, click Edit Properties.
3. Select MDS Access Control.
4. Double-click User to Role Mapping.
5. Assign the BlackBerry smartphone users to the appropriate Pull Roles.
6. Click OK.

Task 3

Create Uniform Resource Locator (URL) patterns.

Note: IP Addresess cannot be used for services like HTTPS, HTTP, TCP etc.

1. In the left pane, select BlackBerry Domain.
2. On the Global tab, click Edit Properties.
3. Select MDS Access Control.
4. Double-click URL Patterns, and then click New.
5. Complete one of the following:
   • To specify all web sites, type *:*/* in the URL Pattern field.
   • To specify a web domain, type *.<domain_name>.com:*/* in the URL Pattern field.
   • To specify a specific web page, type www.<domain_name>.com:80/<subfolder>/webpage.htm in the URL Pattern field.
   • To specify a specific web resource, type www2.<domain_name>.com:80/<subfolder>/main.gif in the URL Pattern field. Note: The asterisk character ( * ) is used as a wild card for the URL Pattern definition.
6. Select the Service Name that is associated with the URL Pattern. For example, Hypertext Transfer Protocol (HTTP), Hypertext Transfer Protocol over Secure Sockets Layer (HTTPS), Lightweight Directory Access Protocol (LDAP), Online Certificate Status Protocol (OCSP), or Transmission Control Protocol (TCP).
7. Click OK.

Task 4

Allow or deny Pull Roles to URL Patterns.

1. In the left pane, select BlackBerry Domain.
2. On the Global tab, click Edit Properties.
3. Select MDS Access Control.
4. Double-click URL Pattern to Role Mapping.
5. Select Allow or Deny to the Pull Roles for each URL pattern.
6. Click OK.

Task 5

Turn on Pull Authorization.

1. From the left pane, select the appropriate BlackBerry Enterprise Server instance.
2. On the Mobile Data Services tab, click Edit Properties.
3. Select Local Access Control.
4. Set Pull Authorization to True.
5. Click OK.

Task 6

Restart the BlackBerry Mobile Data Service.

Important: Restarting certain BlackBerry Enterprise Server services will delay email message delivery to BlackBerry smartphones. For more information, see KB04789.

For BlackBerry Enterprise Server software version 4.1

Task 1

Create Pull Rules.

1. In the left pane, select BlackBerry Domain.
2. On the Global tab, click Edit Properties.
3. Select Access Control.
4. Double-click Pull Rules, and then click New.
5. In the Name field, type the new rule name.
6. In the Description field, type the rule description.
7. Click OK.

Task 2

Map the BlackBerry smartphone users to User Rules.

1. In the left pane, select BlackBerry Domain.
2. On the Global tab, click Edit Properties.
3. Select Access Control.
4. Double-click User to Rules.
5. Assign the BlackBerry smartphone users to the appropriate Pull Rules.
6. Click OK.

Task 3

Create URL patterns.

1. In the left pane, select BlackBerry Domain.
2. On the Global tab, click Edit Properties.
3. Select Access Control.
4. Double-click URL Patterns, and then click New.
5. Complete one of the following:
   • To specify all web sites, type *:*/* in the URL Pattern field.
   • To specify a web domain, type *.<domain_name>.com:*/* in the URL Pattern field.
   • To specify a specific web page, type www.<domain_name>.com:80/<subfolder>/webpage.htm in the URL Pattern field.
   • To specify a specific web resource, type www2.<domain_name>.com:80/<subfolder>/main.gif in the URL Pattern field. Note: The asterisk character ( * ) is used as a wild card for the URL Pattern definition.
6. Select the Service Name that is associated with the URL Pattern. For example, HTTP, HTTPS, LDAP, OCSP, or TCP.
7. Click OK.

Task 4

Allow or deny Pull Roles to URL Patterns.

1. In the left pane, select BlackBerry Domain.
2. On the Global tab, click Edit Properties.
3. Select Access Control.
4. Double-click URL Pattern Rules.
5. Select Allow or Deny to the User Rules for each URL pattern.
6. Click OK.

Task 5

Turn on Pull Authorization.

1. From the left pane, select the appropriate BlackBerry Enterprise Server instance for MDS-CS.
2. On the Connection Service tab, click Edit Properties.
3. Select Access Control.
4. Set Pull Authorization to True.
5. Click OK.

Task 6

Restart the BlackBerry MDS Connection Service.

Important: Restarting certain BlackBerry Enterprise Server services will delay email message delivery to BlackBerry smartphones. For more information, see KB04789.

Additional Information

The Pull Roles or Pull Rules can be created based on logical user groups. For example, Junior Executives, Senior Executives, and Management.

[Khurram]

Thank you.