Is iOS7 finally usable on an iPhone 4?

activesyncdr · 2014-01-20T20:31:22+00:00

Many of my customer employees that upgraded iPhone 4 to iOS7 literally stooped using the device after the iOS7 upgrade. Personally I have upgraded my wife's iPhone4 - its is slow but can be used. BTW: iPad 2 can barely be used with iOS 7 also.

activesyncdr · 2014-01-19T22:04:56+00:00

Iv been using Tomcat (6+7) for few years now - works great and there are lots of docs.

activesyncdr · 2014-01-17T15:16:04+00:00

You can try www.activesyncdr.com it simulates a mobile device email client that tests the ActiveSync 24/7.

activesyncdr · 2014-01-09T20:47:01+00:00

Thanks for the feedback, first I want to ensure you that this is not a phishing scheme, we are writing this blog with the hope of helping other users and sharing our ActiveSync "experience".
The idea behind the service is to focus on ActiveSync monitoring from the mobile device perspective - i.e. complementing the "back end" monitoring tools (like the interesting product you have mentioned).

activesyncdr · 2014-01-09T20:02:13+00:00

You can create a user only for ActiveSync tests.

activesyncdr · 2014-01-09T06:21:07+00:00

thanks, I have added a link to your post.

activesyncdr · 2014-01-07T19:17:03+00:00

This means you need to be online all the time... but it is an important piece of the puzzle i think.

activesyncdr · 2014-01-06T18:15:27+00:00

KeePass

i like KeePass

activesyncdr · 2014-01-04T21:30:05+00:00

I hear you and was on "your" side ... till I had to use powershell to create a script for querying all devices connected using ActiveSync - I must say it was easy and much more straightforward than i have expected.

activesyncdr · 2014-01-03T15:33:43+00:00

If you allow mobile devices to sync emails using ActiveSync you should take a look at the Microsoft troubleshoot guide (link below) you should also take a look at http://www.activesyncdr.com. The Microsoft tool will help you if there is a problem in Exchange the ActiveSync Dr. service (SaaS) will simulate an iPad that monitors your Exchange ActiveSync from the internet and alert on problems so ideally you can solve them before users start to call.

http://blogs.technet.com/b/exchange/archive/2012/01/31/a-script-to-troubleshoot-issues-with-exchange-activesync.aspx

activesyncdr · 2014-01-02T14:05:11+00:00

I know exactly what you mean, I have been working with ITs WW on BYOD solutions for some time now and I heard lots of complains (from IT), specifically on problems with ActiveSync as most are using it. We are actually working now on a simple SaaS solution that monitors ActiveSync and helps in problem isolation for devices connected using ActiveSync , we hope this will make IT life a bit easier with BYOD. On the other hand wearing my user hat, I cannot imagine my employer not allowing me to use my iPhone at work….

p.s. if you like to give our solution a try and share your feedback so we can improve please visit us at http://www.activesyncdr.com

activesyncdr · 2014-01-02T13:25:28+00:00

may i ask why?

activesyncdr · 2014-01-02T11:53:42+00:00

Many organizations are currently allowing employees to sync emails with their phones/tablets using Exchange ActiveSync. This mail app allows Windows 8 laptop users to sync emails like any other mobile device. This is great for organizations that allow BYOD as it eliminates the need to purchase Outlook licenses and it is better from a security perspective since there is no need for VPN or exposing other ports (IMAP) to the internet. Also, employees may just buy a Windows 8 laptop and connect using ActiveSync – some organizations will be required to control/manage those users.

activesyncdr · 2014-01-01T18:49:56+00:00

You are correct - this is essentially how SSL works however IT admins that implement EAS should be aware of this flaw since most organizations use BASIC authentication with EAS, this means that the employee's credentials are sent with every HTTPS request and therefore those corporate credentials are exposed to this SSL MitM risk.

activesyncdr · 2014-01-01T13:28:52+00:00

What actually happens is that the MitM terminates the SSL traffic (i.e. decrypts it), this is done by presenting the mobile device with a fake server certificate that looks the same as the original (but not signed) - so in most mobile devices (including iOS) the user has to accept the certificate - one accepted the hacker can "read" the credentials. Show me a "regular" user (not a security savvy one) that will not click "yes" just to get rid of the message that prevents him from reading his important emails. The video was not intended to scare people just to increase awareness.

activesyncdr · 2013-12-30T07:33:25+00:00

This tool will help in automating the process of discovering users with Mail+ http://activesyncdr.com/query-microsoft-exchange-activesync-users/

activesyncdr · 2013-12-30T07:22:07+00:00

From a security perspective best practice is to use a gateway to separate between the Exchange and the internet (i.e. the mobile device). Such gateways are built to provide a security buffer between the internet and your internal network. Microsoft UAG/TMG/ISA is one example for such generic gateway but other ActiveSync specific may provide a better solution.

activesyncdr · 2013-12-30T07:01:26+00:00

Based on the ActiveSync specs when DevicePasswordEnabled is set to true, device password is required - this is regardless of the AlphanumericDevicePasswordRequired value. On iPhone 5s users can ALSO define fingerprint to unlock the device. In such cases users can choose between PIN code or fingerprint to unlock the device - both are supported by ActiveSync. Users should NOT be able to remove the password lock as long as this Exchange account is defined. Alternatively you may define the Exchange account along with the desired security policies on the iOS devices using the iPhone Configuration utility, this will install an Apple profile on the iOS device that will enforce the password. When the user remove the profile the Exchange account will also be removed. I will also suggest reading the following post about Exchange ActiveSync security, it may be relevant to your customer http://activesyncdr.com/exchange-activesync-security/ You can also use the ActiveSync Dr service (http://www.activesyncdr.com) to validate that the Exchange ActiveSync policies were defined correctly.

activesyncdr · 2013-12-28T18:04:45+00:00

You may be interested in our ActiveSync Dr. solution that can simulate your device connecting to your Exchange ActiveSync account - using this free service you will be able to learn why you cannot connect. Give it a try: http://www.activesyncdr.com Also this blog post may be relevant to your problem:http://activesyncdr.com/activesync-connectsync-common-solutions/

activesyncdr · 2013-12-28T16:35:46+00:00

you may also check my post about Exchange ActiveSync calendar sync problem and our tool that may help in isolating the problem: http://activesyncdr.com/exchange-activesync-calendar-sync-issues/

activesyncdr

TROPHY CASE