iOS Hardening Configuration Guide - DSD

Conteent
Filterinng
Access to intranet sites, and some s mail, contact or calendaring
c data can bbe
achieved d via
reversee
proxies annd
content fi ilters. Theree
are multip ple solutions s in this spaace
such as IIS
from Miicrosoft,
Moobile
Access s Server froom
Apple, and
a wide variety v of othher
solution ns (e.g.
from Cisco
or F5 nnetworks
).
Filteringg
Exchangee
Active Syn nc data prodducts
such as JanusGA ATE Mobilee
(http://wwww.janus.nnet.au/janus
sGATE/Mobbile)
can be e used to en nsure email sent to Exc change
ActiveSSync
devices
has appro opriate privaacy
marking gs for the classificationn
the device e is
approveed
to by an agency. Th his approach
can allow w for an asym mmetric straategy
– mobile
devicess
only receivve
email content
at a cclassification
n appropriat te to the deevice,
as we ell as
have poolicy
and coontrols
appli ied to the email
conten nt.
In this sscenario,
the
agency’s Wide Area Network (W WAN) secur rity domain is NOT exte ended
out to thhe
mobile ddevice,
and there is no need to low wer the classification
off
the agency
WAN.
Such soolutions
cann
be used to o redact speecific
content
patterns from emailss
sent via EAS, E
e.g. to sscrub
creditt
card numb bers from alll
emails syn nced to mob bile devicess.
This class s of
tools caan
also facilitate
correc ct protectivee
marking of f email com ming from moobile
device es
without direct on-device
suppo ort for Austrralian
Gove ernment marking
standdards.
For further
f
informaation
see thee
ISM sectio on on Conteent
Filtering g.
Examplee
of Mail Ap pp interfacee
when Jan nusGATE Mobile M bloccks
email
20 | Defence S ignals
Directo
rate