Pointsec Mobile OS () 3.3.4 Release Notes

Revised: September 2, 2009 This Release Notes document provides essential operating requirements and describes known issues for Pointsec Mobile Symbian OS (S60) 3.3.4. Review this information before installing Pointsec Mobile Symbian OS (S60) 3.3.4.

In This Document

About This Document page 1 About Pointsec Mobile Symbian OS (S60) page 2 New in This Release page 2 Supported Devices page 2 3rd-party Software page 3 page 3 Temporary Encryption page 4 System Requirements page 4 Hardware Requirements page 5 General Recommendations page 5 Compatibility between Releases page 6 Known Issues in This Release page 6 FYI page 7 Late-breaking Documentation page 8 Documentation Feedback page 8

About This Document This document contains information about Pointsec Mobile Symbian OS (S60) version 3.3.4, such as new features and functions in this release, what problems have been fixed since the previous release and system requirements. In this document, the abbreviation N/A is used. N/A means Not Applicable. Pointsec Mobile Symbian OS (S60) is also referred to as Pointsec Mobile or Pointsec.

Copyright © 2009 Pointsec Mobile Technologies AB, a Check Point Software Technologies company. All rights reserved 1 About Pointsec Mobile Symbian OS (S60)

About Pointsec Mobile Symbian OS (S60) Pointsec Mobile Symbian OS (S60) provides users of devices powered by the Series 60 3rd Edition operating system with automatic, real-time encryption of data for convenient and enforceable handheld security for enterprises on the move.

New in This Release

New Devices

These devices are added in this version: • Nokia N97 • Nokia E75 • Nokia 6121 Classic

Supported Devices The following tables contain the devices and operating systems that are supported at the time of the release of Pointsec Mobile Symbian OS (S60) 3.3.4. However, this list is subject to change. To see a current list of supported devices, please visit www.checkpoint.com/supportedhandhelds/. Pointsec Mobile supports the following devices in this release:

Table 1 Supported Devices Device Recommended phone software (firmware) version 06.28.3.0 or later 100.34.20 2.0618.06.05 or later Nokia E61i 1.0633.22.05 Nokia E62 2.06.18.06.17 or later 100.21.110 1.0633.18.01 200.21.118 2.0618.07.09 or later 200.21.118 Nokia E71x V 03.27 or later Nokia E75 V 110.48.125 or later Nokia E90 V 210.34.75 V 4.0632.0.38 or later V 10.0.035 Nokia N81 8GB V 11.0.045 V 11.0.117 Nokia N93i V 11.0.009 V 12.0.13 or later Nokia N95 8GB V 15.0.015 Nokia N97 v 11.0.021 or later V 03.51

Pointsec Mobile Symbian OS (S60) 3.3.4 Release Notes. Last Update — September 2, 2009 2 3rd-party Software

Table 1 Supported Devices Device Recommended phone software (firmware) version Nokia 6121 Classic Latest firmware Nokia 6124 v 04.34 We recommend that you upgrade to the latest ROM available from your phone manufacturer.

3rd-party Software Pointsec Mobile Symbian OS (S60) 3.3.4 is interoperable with the following 3rd-party products: • F- Secure Mobile Security 4.0 (13511) • Mail for Exchange 2.7 and 2.9 • Nokia Intellisync Mobile Suite 7.0 - 9.0 is supported under the conditions described in the “Push Email” section • Sybase iAnywhere OneBridge 5.50 (17094) • SEVEN Always-On Mail 5.0.20 • Trend Micro Mobile Security 5.0 (1050)

Push Email On certain combinations of device, firmware, and policy configuration, it is possible to be notified of incoming email even when Pointsec is in a locked state. The Enable screen lock setting must be set to Yes. Tip! In the Pointsec Mobile About box, look for the text “Push email is supported”. Push email is supported for the following devices: • E90 • E71 • E71x • E75 • E66 • E63 • E51 • E51-2 Use the recommended software version, see “Supported Devices” on page 2.

Pointsec Mobile Symbian OS (S60) 3.3.4 Release Notes. Last Update — September 2, 2009 3 Temporary Encryption

A note to our customers about untested software

We do not recommend the installation of untested software because this may compromise Pointsec Mobile's functionality or produce unwanted behavior in the device. The following are examples of problems that can arise with untested software: The software may be denied access to encrypted files. Pointsec Mobile must close most applications when locking, and untested software may not handle restart properly. The software may create files that unintentionally become encrypted. A common example is .txt files used for logging. Unintentionally encrypted files may prevent the software from working properly, but can be worked around by placing the folder containing such files on the exclusion list.

Temporary Encryption The temporary encryption function is supported on the same devices as the push email function. For a list of devices, see “Push Email” on page 3. For a description of the temporary encryption function, see the Administrator’s Guide delivered with the product.

System Requirements

Disk and Memory Space

Table 2 Disk and Memory Space

On the: Space Administrator’s workstation Minimum 5 MB Device Minimum 0.5 MB

Operating Systems and Software

Table 3 Operating Systems and Software

On the: Space Administrator’s workstation • Microsoft Windows 2000 Professional or XP Professional (Note that Vista is supported in Pointsec Administration Console 1.3.) • Synchronization software • Pointsec Administration Console 1.1.1 or later. For requirements regarding Pointsec Administration Console, please see the Pointsec Administration Console Release Notes. Device • Nokia S60 3rd Edition • Check your hardware vendor’s web site for the latest end-user updates. • Synchronization software

Pointsec Mobile Symbian OS (S60) 3.3.4 Release Notes. Last Update — September 2, 2009 4 Hardware Requirements

Hardware Requirements To install Pointsec Mobile on a device, you need a working synchronization connection between your Symbian device and your PC (e.g. by cable, infrared, , etc.)

General Recommendations We strongly recommend that you always follow the documented procedures for installing, upgrading and removing Pointsec Mobile. Moreover, we recommend the following:

Consider Usability Before deploying to large numbers of users, we recommend that you test each new profile for usability. While Pointsec Mobile is a powerful, flexible security tool, it does not warn if security settings are likely to make the device difficult to use. If you need help reaching the optimum balance between security and user experience for your organization, please contact your Check Point representative.

Allow Pointsec Mobile to complete operations When installing, upgrading or uninstalling Pointsec Mobile, do not switch the device off manually until the operation is complete.

Unlock Pointsec Mobile before installation and removal activities Make sure that Pointsec Mobile is unlocked before initiating installation or removal of other applications on a Pointsec Mobile-protected device.

Exercise caution when defining encryption lists When defining encryption inclusion lists, • Do not add C:\ to the list. If you do, you risk encrypting programs and utilities so that they do not function correctly. • Ensure that Pointsec Mobile does not encrypt files or folders needed by any unsupported applications you may have chosen to use. If you are uncertain, try adding relevant files and folders to the exclusion list, or test using the Relaxed and Typical predefined sets.

Comply with the following memory card tips Do not configure the setting Require encrypted memory cards to Yes in the install settings if users will need to run applications from their memory cards. Do not switch off power to the device when encrypting or decrypting a memory card. Do not run anti-virus scans in the following situations: • When Pointsec Mobile is locked. • At the same time as encrypting/decrypting cards. • When creating a back-up. (Automatic scans should be disabled.)

Pointsec Mobile Symbian OS (S60) 3.3.4 Release Notes. Last Update — September 2, 2009 5 Compatibility between Releases

Compatibility between Releases You can upgrade from Pointsec for Symbian OS (S60 3rd Ed.) 3.x to Pointsec Mobile Symbian OS (S60) 3.3.4. You cannot upgrade from Pointsec Mobile Symbian OS (S60) 3.3.1 to version 3.3.2 on E66 pr2 and E71 pr2 devices. You must remove version 3.3.1 before installing version 3.3.2.

Known Issues in This Release The following are known issues in this release:

Table 4 Known Issues in This Release

ID Short Description Description/Info N/A Upgrade not possible on E66 Upgrading Pointsec Mobile 3.3.1 to version 3.3.2 is not pr2 and E71 pr2 devices possible on E66 pr2 and E71 pr2 devices. You must remove version 3.3.1 before installing version 3.3.2. 512739 Backup and restore to To do backup and restore, the memory card must be used. memory card only PC Suite does not work and is not supported for this purpose. 503905 On N97 devices: Memory On Nokia N97 devices, encryption of internal memory card card encryption supported on only is supported. External memory cards are not supported internal card only on this device. 454654 Interoperability problem with The device hangs when Pointsec Mobile is encrypting files Kaspersky Mobile Security during installation on a device on which Kaspersky Mobile Security is installed.

Workaround: Remove the battery and hard reset the device. 454649 Pointsec Mobile displays When a user selects a number from the call log and places “unknown number” when a call when screen lock is activated, Pointsec Mobile calling via call logs displays “unknown number” instead of the contact name and number. 453907 Problem using WLAN in Using WLAN in offline mode does not work when Pointsec offline mode Mobile is screen locked and Mail for Exchange is attempting to synchronize mail.

Workaround: When the phone starts, dismiss the connection dialog box that displays. 397636 The mail application closes When the user tries to add an attachment to a mail with when an attachment is Pointsec Mobile locked, the authentication screen appears. added After the user authenticates, the mail application closes and the mail is sent to the draft folder. 397470 Mp3 files not encrypted If an mp3 file is currently playing when Pointsec Mobile when in use locks, that file will not be encrypted, even if the file is included in the encryption list. This prevents the file from stopping unexpectedly. 396600 Inconsistent Mail for When Pointsec Mobile is locked, Mail for Exchange behaves Exchange behavior when inconsistently when synchronizing. Normally, success or synchronizing failure of synchronization is dependent upon the settings in the profile. 396288 Text display problems in If the Windows font size is set larger than the default or a some Pointsec Mobile dialog non-standard Windows XP theme is used, certain dialog boxes accessed from the boxes in Pointsec Mobile may not display correctly in Pointsec Administration Pointsec Administration Console. Console Workaround: Use the standard font size and Windows XP standard theme.

Pointsec Mobile Symbian OS (S60) 3.3.4 Release Notes. Last Update — September 2, 2009 6 FYI

Table 4 Known Issues in This Release

ID Short Description Description/Info 396088 Using an encrypted audio If your current profile requires the encryption of audio files file for a ring tone does not (for example MP3) and you specify one of these files as a work correctly ring tone, the default ring tone plays instead when you receive an incoming call.

Workaround: Place ring tones in a separate folder (My Ring Tones, for example) and then place this folder in the exclusion list, which you access from Pointsec Administration Console. This prevents the ring tones from being encrypted. 394551 Locking Pointsec Mobile When the user locks Pointsec Mobile, certain applications causes certain applications terminate that one would expect to remain open. Examples to terminate unexpectedly of such applications are the Printers application, the File Manager, and the Navigator.

The user must restart the terminated applications to continue using them. 395933 A Mail for Exchange email is When Pointsec Mobile is locked and a user selects an marked as read upon user unread message in Mail for Exchange, enters the password access when Pointsec Mobile to unlock the device, and navigates back to the inbox, the is in locked state mail is marked as read, even though the user has not viewed the content of the message. 395275 Restart needed if memory If there is not enough memory space available when full when removing Pointsec removing Pointsec Mobile from a device, the removal process cannot be carried out. An error message displays after the Remote Help procedure, asking the user to free a certain amount of memory.

Workaround: Restart the device, free memory space, then initiate removal again. 390374 Decryption of multiple It is not possible to decrypt more than one memory card memory cards not possible when removing Pointsec Mobile from the device. when removing Pointsec Mobile Workaround: (if the profile allows it): If there are no restrictions on memory card usage: decrypt the memory cards before removing Pointsec Mobile by using the Memory card option in the Pointsec screen.

FYI This section contains information on issues that are not Pointsec Mobile related. The information may be helpful in certain situations.

Table 5 FYI

ID Information 396918 Due to issues with backup and restore functionality on the S60 3rd Ed. platform and 512739 Nokia PC Suite, Pointsec Mobile is not reliably restored after a backup operation. To avoid adverse consequences backup and restore is not supported at all by Pointsec Mobile. 396580 If you are using OneBridge DM and need to send out a Pointsec Mobile update profile, you must set the trigger for the update action in the OneBridge DM server to run when device connects, but only once every ... to a large value, for example, 1 year. The files should then be transferred only once (in this case, once every year). Otherwise, OneBridge DM sends out the same update profile repeatedly.

If you want the file to be transferred again, change the trigger run option back to when device connects.

Pointsec Mobile Symbian OS (S60) 3.3.4 Release Notes. Last Update — September 2, 2009 7 Late-breaking Documentation

Table 5 FYI

ID Information 395827 Nokia Intellisync MobileSuite 7 sometimes does not resume push e-mail when Pointsec Mobile unlocks.

Workaround: 1. In the Intellisync server, go to the Settings tab and configure the following settings under Push/ReadySync Settings. 2. Check Retry on failed connections. 3. Set Initial retry interval to 5 minutes or less. 4. Set Subsequent interval to 5 minutes or less. 455547 On rare occasions, Pointsec Mobile does not start after an unsupported (blocked) upgrade attempt.

Workaround: Install the same version of Pointsec Mobile again.

Late-breaking Documentation This section contains informaiton on documentation issues which have not yet been corrected in the documentation.

Table 6 Late-breaking documentation

ID Information 455917 The Pointsec Mobile Symbian OS (S60) Administration Guide says: "Upgrading Pointsec Mobile entails copying the Pointsec_s60v3.sis file and the InstProf.PPP file from the Install Set folder to the C:\Data\Others folder on your device."

This information is obsolete. InstProf.PPP is no longer used during upgrade.

Documentation Feedback Check Point is engaged in a continuous effort to improve its documentation. Please help us by sending your comments to: [email protected]

Pointsec Mobile Symbian OS (S60) 3.3.4 Release Notes. Last Update — September 2, 2009 8