Does Axim present a security risk to computer networks?

ldrafter · 02-03-07, 06:28 AM

I've recently ceased to be able to sync my x51v with my work computer. I've confirmed with IT support at work that this is the result of recent changes to the firewall implementation and other security measures aimed at reducing the risk of external forces impacting the operation of the network.

The question that I have is whether allowing a PDA to connect and sync with my desktop computer truly increases the risk of a successful attack on the desktop and/or the network? Is this risk any greater than that which exists by allowing files stored on removable media (flash drive, optical disk, etc.) to be accessed on the computer?

When I spoke to IT support it did not seem like they had an informed understanding of the risk associated with PDAs and if I am to make the case that they should be allowed to connect to the computer, I need to have a better idea of what the risk is.

Secondly, if I am unable to convince the IT people that an exception should be made for devices like the x51v, is there a workaround that I could use to allow me to sync with MS Outlook calendar on my desktop?

I appreciate any advice you can give me on this.

purcy · 02-03-07, 09:40 AM

I don't know if this will be of any help to you, but on my laptop where I have my Activesync program, I also run Zone Alarm firewall program. When I first installed and ran Activesync, I got an alarm screen from Zone Alarm (as it should) stating that ActiveSync was trying to act as a server. I checked to always allow this. I don't sync my Outlook Express email into my palm, so ActiveSync no longer has to go out onto the internet. If I can configure my little free Zone Alarm firewall to allow just ActiveSync to do its thing, I can't see why your IT dept. won't have the same configuration options. Good luck.

CodeBubba · 02-03-07, 11:47 AM

The security admins on these corporate LAN's are very anal about this kind of thing. Offhand, synchronizing a device like a PDA really should not be much of a security risk particularly when talking about viruses. If the IT dept really wants to lock the network down then they need to completely ban all external devices not just single out PDA users. The PDA is no higher a risk than any plug in Flash drive or pocket hard drive.

-CB

AKAJohnDoe · 02-03-07, 12:17 PM

The network is not really at risk; however, the data can be. How would you feel if a PDA without even a password lockout on it was lost or stolen that had been used to download the entire email address book of the entire corporation, had the HR records of everyone on it, the corporate financial records, and the strategic plans for the next 18 months? And, yes, flash drives and CD/RW and DVD/RW and the like are also risky.

markvan · 02-04-07, 04:50 PM

Depending on how your Security guys have gone about it, you may be able to get around this by switching your Axim to use Serial over USB. You can do this by going to Start > Settings > Connections > USB to PC and uncheck the checkbox.

This stops the PPC connecting over TCP and gets around a lot of firewall problems.

Hope this helps someone.

cchiang12 · 02-04-07, 06:24 PM

It's possible to sync with data on your computer instead of the Microsoft outlook server. or is that not possible for you either?

As for risks... basically anything that connects to your work computer from external equipment can be consider a risk... if my phone can connect to the work computer, that can be a risk too :) It's all depends on your IT team and management really...
I'm surprised you're the only one with the pda that questioned the IT staff

crUshed420 · 02-05-07, 09:13 AM

Of all the corporate environments I've worked in, I've never heard of restricting access to a PDA!!

In fact, 95 percent of those working in office jobs use a PDA of some sort (mostly blackberries, but whatever) - just tell IT that you NEED your pda for work, and they're just gonna have to open the firewall for you :P

AKAJohnDoe · 02-05-07, 11:59 AM

Most corporate environments I have been in severely restrict the ability to connect a PDA to any of their devices or networks. They often do allow the PDAs they provide in, usually BlackBerrys. In any case, anything I NEED for a job had better be provided by the employer!

crUshed420 · 02-05-07, 12:28 PM

If you have a CD-ROM drive in your computer then I really don't see how connecting a PDA to your computer poses any bigger risk.

Or what about a USB thumbdrive? Do they also restrict USB devices connecting to your computer?

Blocking PDA access is verging on paranoia if you ask me.

Any media that you can connect to your computer could POTENTIALLY cause problems, but that's just the name of the game.

AKAJohnDoe · 02-05-07, 01:38 PM

The bottom line is that the data and network are the property of the corporation, not you, and the corporate officers are responsible and liable for improper usage. Any network or data access needed to perform a job for which you were hired is also the responsibility of the corporation to provide. There is no obligation whatsoever to grant this access to private person's in any way. And, in fact, taking that access without being explicitly granted it may, in some cases, be a crime.

If you don't like it, don't work there. "The name of the game"? How naive!

crUshed420 · 02-05-07, 02:02 PM

Listen - I was merely trying to offer the OP advice on how to approach IT with his problem. Just because a company doesn't provide you with an Axim, doesn't mean they won't let you use one if it benefits your eventual work product.

This has worked for me in the past, so that's why I suggested it to him.

I love how trolls like you try to start arguments everywhere you go. 2619 posts, 90 percent crap.

Have a good day!

crUshed420 · 02-05-07, 02:13 PM

Oh, and BTW - exactly how is my statement "that's the name of the game" naive???

Any media you can attach to a computer could pose a potential risk - THAT IS THE NAME OF THE GAME.

You're the one who's naive if you doubt that!

02-05-07, 03:30 PM

.. it's a bit ironic how you're calling him a troll, really. Some places don't even let you connect USB thumb drives or have PDA's or other devices capable of recording data active in work areas. The reason for this is because the threat they pose is either that THEY can't be affected by virii but can carry virus-infected files onto the network, or b) because they can be used to copy proprietary or otherwise classified information.

I suspect that the IT people at ldrifter's office are just going with corporate policy, which is a bit nebulous as it was probably drafted before PDA capabilities became commonplace among personal devices; and the firewall probably operates on the 'if it's not explicitly approved, it's forbidden' principle. I suppose you could try to get an IR or BT dongle, if the system will let you hook up one, and then sync Activesync via IR or BT, which will bypass the whole TCP/IP stack implementation requirement.

AKAJohnDoe · 02-05-07, 04:36 PM

Originally Posted by crUshed420

Listen - I was merely trying to offer the OP advice on how to approach IT with his problem. Just because a company doesn't provide you with an Axim, doesn't mean they won't let you use one if it benefits your eventual work product.

This has worked for me in the past, so that's why I suggested it to him.

I love how trolls like you try to start arguments everywhere you go. 2619 posts, 90 percent crap.

Have a good day!

Yes. Troll. That's me all right. Sure. Over seven years as an officer of a Fortune 500 company in the IT division, actually.

**Martin** · 02-05-07, 04:48 PM

OK, gents, agree to disagree, go get a beer and forget about it.