Re: iTunes for iPhone in an Enterprise

[Todd Haverkos <infosec () haverkos com>]

J Teddy <jteddylists () gmail com> writes:

> Yes, my organisation is a little slow of the mark, and we are now
> looking at deploying iPhones.
>
> Currently it appears management is not comfortable with users having
> iTunes installed on individuals machines.  I am not sure what these
> concerns are. 

I'd suggest exploring that question a bit more.  

If they're not comfortable with iTunes, then I have no idea how
they're going to get comfortable with a device that requires the shift
in thinking that a smart phone does from the very mature, granular,
and vendor supported manageability that's built in the Blackberry
platform to the relative anarchy  an app-centric platform like iPhone
or Android can bring. 

There's been no convergence in iPhone management -- if you want to do
anything beyond ActiveSync and a connector to Exchange, you're looking
at third party mobile managment systems by a very large number of
niche providers. 

Unless the Apple SE that I talked with a few weeks ago has horribly
misled me. 

Mind you these are all manageable risks to a reasonable enterprise,
but it's rather concerning and surprising to hear "iTunes on the
Desktop--for shame!"  being the biggest pain point of all available
pain points in adding support for iPhones. 

> Apparently other organisations have solved this issue with using
> kiosks, and this is the golden bullet that CIO's are talking about
> in their circles.

Kiosks didn't come up at all in my talks with Apple, so I'll plead
ignorance on that.  Interested in what others have to say, though. 

Also curious what if any mobile management vendors for iphone have
ability to log all IM and web URL's from the devices for
logging/compliance needs.

--
Todd Haverkos, LPT MsCompE
http://haverkos.com/

------------------------------------------------------------------------
Securing Apache Web Server with thawte Digital Certificate
In this guide we examine the importance of Apache-SSL and who needs an SSL certificate.  We look at how SSL works, how 
it benefits your company and how your customers can tell if a site is secure. You will find out how to test, purchase, 
install and use a thawte Digital Certificate on your Apache web server. Throughout, best practices for set-up are 
highlighted to help you ensure efficient ongoing management of your encryption keys and digital certificates.

http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f727d1
------------------------------------------------------------------------