Blocking GW MAIL and other Ghost Pattern Apps

I have a need to prevent GW Mail and other apps from Ghost Pattern Software from connecting to Web Access. Management has deemed this access a security risk and wants it to be blocked immediately. They are considering shutting down Web Access until a fix is found.

These products allows users, with their personal devices, to bypass our Mobile Device Management (MDM) system and access their Email. Users are then able to read and save their messages on their unprotected device.

Does anyone have a solution to this issue?

Regards,

Vince
  • On 28/08/2014 14:36, vgerretz wrote:

    > I have a need to prevent GW Mail and other apps from Ghost Pattern
    > Software from connecting to Web Access. Management has deemed this
    > access a security risk and wants it to be blocked immediately. They are
    > considering shutting down Web Access until a fix is found.
    >
    > These products allows users, with their personal devices, to bypass our
    > Mobile Device Management (MDM) system and access their Email. Users are
    > then able to read and save their messages on their unprotected device.
    >
    > Does anyone have a solution to this issue?


    Have you tried asking Daniel Shelley, the developer of these apps. His
    email address is @ http://ghostpattern.com/Ghost_Pattern/About_Us.html

    I believe his apps communicate with the basic/simple interface of
    GroupWise WebAccess but I don't think you can configure WebAccess to not
    allow (or block) access to the basic/simple interface.

    HTH.
    --
    Simon
    Novell Knowledge Partner

    ------------------------------------------------------------------------
    If you find this post helpful and are logged into the web interface,
    please show your appreciation and click on the star below. Thanks.
    ------------------------------------------------------------------------
  • On Thu, 28 Aug 2014 13:36:03 GMT, vgerretz
    <vgerretz@no-mx.forums.novell.com> wrote:

    >
    >I have a need to prevent GW Mail and other apps from Ghost Pattern
    >Software from connecting to Web Access. Management has deemed this
    >access a security risk and wants it to be blocked immediately. They are
    >considering shutting down Web Access until a fix is found.
    >
    >These products allows users, with their personal devices, to bypass our
    >Mobile Device Management (MDM) system and access their Email. Users are
    >then able to read and save their messages on their unprotected device.
    >
    >Does anyone have a solution to this issue?


    Vince,

    Just curious...why is this any different from a user accessing Web
    Access from a computer? A user could be using a home PC, a personal
    laptop on the road, a computer at a clients office. You have no
    control over those computers, so why should phones/tablets be any
    different?

    Ken
  • On 28/08/2014 16:39, KeN Etter wrote:

    > Just curious...why is this any different from a user accessing Web
    > Access from a computer? A user could be using a home PC, a personal
    > laptop on the road, a computer at a clients office. You have no
    > control over those computers, so why should phones/tablets be any
    > different?


    Which in itself is no different from accessing GroupWise away from the
    office via a Windows laptop running the GroupWise client. Yes different
    protocols/ports are involved but still accessing email.

    It seems the company would need to block all access to email from all
    non-company devices which would mean not just stopping WebAccess (unless
    have Mac and/or Linux-based devices on-site) but also IMAP and/or POP
    from outside.

    Hmm I can't see too many employees being unhappy with that - no work
    email when away from work unless given corporate device. Provided of
    course that they have a separate email account hosted elsewhere for
    personal use!

    HTH.
    --
    Simon
    Novell Knowledge Partner

    ------------------------------------------------------------------------
    If you find this post helpful and are logged into the web interface,
    please show your appreciation and click on the star below. Thanks.
    ------------------------------------------------------------------------
  • Simon,

    Thanks for the info. I will reach out to Daniel and see what, if any, can be done.

    Vince
  • Issue is the attachments. I can stop the end user from viewing and saving the attachments from the browser by changing three switches in webacc.cfg file. However, that does not impact the app from still presenting and allowing the end user to read and save the attachments. That is the issue we have with the apps.
  • Hi Vince, if you find a solution, could you please post it...we too have an issue with this.
    The application is great and for a good number of people and companies, this may be a solution, however, where confidentiality is a key factor, this application can open one up to great risk.