Protecting devices from network threats

An organization's network can pose potential security risks to users' device data. For example, malicious actors can intercept and alter data transmission, or the encryption and authentication of a Wi-Fi access point may not be secure. BlackBerry Protect Mobile defends against the following network threats:

Threat

Platform

Description

Insecure network connections
  • iOS
  • Android
  • BlackBerry Dynamics apps and the UEM Client try to connect to the BlackBerry cloud services to detect if there is a rogue actor on the network that is attempting to compromise the device's connections.
  • If the TLS connection to the BlackBerry cloud services is not successful, BlackBerry Protect Mobile determines that the network is not secure.
  • Every BlackBerry Dynamics app on the device periodically performs insecure network checks.

Insecure Wi-Fi access point
  • iOS
  • Android
  • You can define which Wi-Fi access points are considered insecure and apply a compliance action when a user connects to an insecure network.
  • On Android devices, BlackBerry Access, BlackBerry Work, and the UEM Client check the properties of the current Wi-Fi access point to determine if it is secure.
  • On iOS devices, the UEM Client checks the properties of the current Wi-Fi access point to determine if it is secure. For iOS, this feature requires UEM Client version 12.50.x or later and the MDM Controls activation type.
  • The UEM Client periodically checks the security of the device's current Wi-Fi network. On Android devices, BlackBerry Access and BlackBerry Work also do the same.

When a weak Wi-Fi access point is detected, UEM considers the device connected to the network to be out of compliance. You can configure and assign a compliance profile to users so that UEM can take an appropriate management action. For example, you can prevent BlackBerry Dynamics apps from running on the device until the device is connected to a more secure or trusted network and the device returns to compliance.