Pointsec Mobile Pocket PC

3.4.9 Release Notes

29 July 2010

© 2010 Check Point Technologies Ltd. All rights reserved. This product and related documentation are protected by copyright and distributed under licensing restricting their use, copying, distribution, and decompilation. No part of this product or related documentation may be reproduced in any form or by any means without prior written authorization of Check Point. While every precaution has been taken in the preparation of this book, Check Point assumes no responsibility for errors or omissions. This publication and features described herein are subject to change without notice. RESTRICTED RIGHTS LEGEND: Use, duplication, or disclosure by the government is subject to restrictions as set forth in subparagraph (c)(1)(ii) of the Rights in Technical Data and Software clause at DFARS 252.227-7013 and FAR 52.227-19. TRADEMARKS: Refer to the Copyright page (http://www.checkpoint.com/copyright.html) for a list of our trademarks. Refer to the Third Party copyright notices (http://www.checkpoint.com/3rd_party_copyright.html) for a list of relevant copyrights and third-party licenses.

Important Information

Latest Version The latest version of this document is at: http://supportcontent.checkpoint.com/documentation_download?ID=11173 For additional technical information, visit the Check Point Support Center (http://supportcenter.checkpoint.com).

Revision History Date Description

27 July 2010 Initial version

Feedback Check Point is engaged in a continuous effort to improve its documentation. Please help us by sending your comments (mailto:[email protected]?subject=Feedback on Pointsec Mobile Pocket PC 3.4.9 Release Notes).

Contents

Important Information ...... 3 About This Document ...... 5 Pointsec Mobile Pocket PC ...... 6 About Pointsec ...... 6 What's New ...... 6 Supported Devices ...... 6 Third Party Software...... 8 General Recommendations ...... 9 About Wireless Communication ...... 9 System and Hardware Requirements ...... 10 Disk and Memory Space ...... 10 Operating Systems and Software ...... 10 Account Permissions Required ...... 11 Hardware ...... 11 Compatibility Issues ...... 12 Upgrading Pointsec Mobile Pocket PC on Devices ...... 12 Encryption Functionality ...... 12 Intermediate Upgrades ...... 12 Compatibility With Other Programs ...... 12 Known Issues ...... 13 Additional Information ...... 16

Chapter 1 About This Document

This document contains information about Pointsec Mobile Pocket PC version 3.4.9. build 611.  In this document, the abbreviation N/A is used. N/A means Not Applicable.  Throughout the documentation, Pointsec Mobile Pocket PC is also referred to as Pointsec Mobile or simply Pointsec.  Releases prior to version 3.3 are referred to by the previous name, that is, Pointsec for Pocket PC ( 5). In the 3.4 release, (Windows Mobile 5) was dropped from the product name.

Page 5

Chapter 2 Pointsec Mobile Pocket PC

In This Chapter

About Pointsec 6 What's New 6 Supported Devices 6 Third Party Software 8 General Recommendations 9

About Pointsec Pointsec Mobile Pocket PC provides users of handheld devices powered by Windows Mobile operating systems (Windows Mobile 5.0, 6, 6.1 and 6.5 Classic, and Professional versions) with automatic, real-time encryption of data including Outlook E-mail and Notes - providing convenient and enforceable handheld security for enterprises on the move.

What's New In this release, the support for the following devices has been added:  LG GM750  7350

Supported Devices The following table contains the devices that are supported at the time of the release of Pointsec Mobile Pocket PC 3.4.8. However, the list is subject to change. To see a current list of supported Pocket PC devices, please visit http://www.checkpoint.com/supportedhandhelds/ (http://www.checkpoint.com/supportedhandhelds/\n)

Windows Mobile 5.0 Windows Mobile 6 Windows Mobile 6.1 Windows Mobile 6.5 Devices Devices Devices Devices 6700 (Audiovox GloFiish X500 AT&T HTC P4600 AT&T LG GW 820 6700)

Cingular 8125 GloFiish M700 AT&T (LG) Incite AT&T HP Glisten

Cingular 8525 HP iPAQ 100 series AT&T Samsung SGH-i907 AT&T HTC Pure

Cingular Palm 750 HP iPAQ 200 series AT&T Tilt (8925) AT&T HTC Tilt 2

Dell Axim X51v HP iPAQ 600 series HTC Touch Pro HTC HD mini

Page 6

Supported Devices

Windows Mobile 5.0 Windows Mobile 6 Windows Mobile 6.1 Windows Mobile 6.5 Devices Devices Devices Devices E-Ten Glofiish M700 HTC P4350 HTC Touch Pro2 HTC Touch HD 2

E-Ten Glofiish X500 HTC Touch Cruise HTC Touch Diamond HTC Touch Pro2

Fujitsu Siemens HTC Touch (P3450) HTC Touch Diamond2 HTC Touch2 Pocket LooX N520

HP iPAQ 6815 HTC Touch Dual HTC TyTN II (P4550) Sony Ericsson Xperia X2

HP iPAQ 6915 HTC TyTN MC75 Samsung B7610

HP iPAQ hw6925 HTC TyTN II (P4550) LG GM750

HP iPAQ hx2190 HTC X7501 Sprint Mogul (PPC-6800) Samsung 7350

HP iPAQ hx2490 Palm Pro

HP iPAQ hx2790 Palm Vodafone Sony Ericsson Xperia X1

HTC P3300 Sharp WS011SH HTC Touch HD

HTC P3600 Samsung SCH- i760

HTC P4350 Vodafone v1520

HTC TyTN Vodafone v1615

HTC X7500 VPA Compact IV

HTC Z Symbol MC35 i-mate JAMin i-mate JASJAR i-mate K-JAM

Intermec CN3

Palm

Palm

Palm Treo 750v

Palm Treo 750 EU Version

Palm Treo 750 US Version

Qtek 9000

Qtek 9100

Qtek s200

Pointsec Mobile Pocket PC Page 7

Third Party Software

Windows Mobile 5.0 Windows Mobile 6 Windows Mobile 6.1 Windows Mobile 6.5 Devices Devices Devices Devices Sharp/Willcom W ZERO3 WS003SH

Sharp/Willcom W ZERO3 WS004SH

Sharp/Willcom W ZERO3 WS007SH

SoftBank x01H

Symbol MC7095

T-Mobile MDA Pro

T-Mobile MDA Vario

Vodafone v1605

VPA Compact GPS

Third Party Software Pointsec Mobile Pocket PC 3.4.8 is interoperable with the following 3rd-party products:  SEVEN Always-On Mail 5.0.11  MS Exchange SP2  Mformation 4.0  Sybase iAnywhere OneBridge 5.5  Mobile Suite 8.0  ActiveSync 4.5  Norton Security 5.0  Trend Micro AntiVirus 3.0  F-Secure Mobile Anti-Virus 4.6 Note - Pointsec Mobile may not be interoperable with third-party data

encryption applications.

Pointsec Mobile Pocket PC Page 8

General Recommendations

General Recommendations We strongly recommend that you:  Always follow the documented procedures for installing, removing and upgrading Pointsec Administration Console and Pointsec Mobile.  When upgrading Pointsec Mobile software on phones, always upgrade to the latest version of Pointsec Administration Console.  Do not soft reset a device when installing, removing, or upgrading Pointsec Mobile, or when using Remote Help.  Do not attempt to access removable media when installing, removing, or upgrading Pointsec Mobile on a device.  Always back up data on devices and removable media before installing, removing, or upgrading Pointsec Mobile.  When installing, removing or upgrading Pointsec Mobile, ensure that the device is  on external power  not configured to power off if unused.•  On Pointsec Mobile-protected devices, do not rename or move files used by Pointsec Mobile.  When saving installation sets or update profiles on the network, you must mount the drive first  Do not attempt to encrypt full removable media. For more information see the section on Disk and Memory Space (on page 10).

About Wireless Communication You should be aware that on a device that has wireless communication activated, it may be possible for unauthorized persons to use the wireless communication to access files on the device.

Pointsec Mobile Pocket PC Page 9

Chapter 3 System and Hardware Requirements

In This Chapter

Disk and Memory Space 10 Operating Systems and Software 10 Account Permissions Required 11 Hardware 11

Disk and Memory Space Component Space

Administrator’s PC 15 MB for Pointsec Mobile

Device Approximately 1.9 MB of free storage memory for Pointsec Mobile.

Removable Media (Memory Approximately 1 MB of free space to allow for encryption of data on Card) removable media.

Note: Removable media can become corrupt if you attempt to encrypt it when it is full.

Operating Systems and Software Component and software

Administrator’s PC  Microsoft Windows 2000 Professional, XP Professional, and Vista  Pointsec Administration Console 1.1.1 or later. For requirements regarding Pointsec Administration Console, please see the Pointsec Administration Console Release Notes.  For 2000 and XP: Microsoft ActiveSync software 4.2 or later.  For Vista: Microsoft Windows Mobile Device Center. Client PC  Microsoft Windows 2000 Professional, XP Professional, and Vista  For 2000 and XP: Microsoft ActiveSync software 4.2 or later.  For Vista: Microsoft Windows Mobile Device Center. webRH  For requirements on the webRH server, see the documentation accompanying SmartCenter for Pointsec—webRH Device  Windows Mobile 5.0, Windows Mobile 6 Classic, and Windows Mobile 6 Professional  Check your hardware vendor’s web site for the latest end-user updates.

Page 10

Account Permissions Required

Account Permissions Required Account Rights Required for folder

User Write, read and execute rights to the recovery folder

Hardware To install Pointsec Mobile on a device, you need a Pocket PC device cradle or ActiveSync cable connected to the , or a network sync connection.

System and Hardware Requirements Page 11

Chapter 4 Compatibility Issues

In This Chapter

Upgrading Pointsec Mobile Pocket PC on Devices 12 Removable Media Encryption Functionality 12 Intermediate Upgrades 12 Compatibility With Other Programs 12

Upgrading Pointsec Mobile Pocket PC on Devices  You can upgrade to this version of Pointsec Mobile Pocket PC only from Pointsec for Pocket PC or Pointsec Mobile Pocket PC 3.x.  You cannot upgrade to the same version that is already installed.

Removable Media Encryption Functionality Pointsec Mobile Pocket PC 3.4.x’s removable media encryption functionality is not compatible with that of previous versions of Pointsec Mobile. Ensure you decrypt the removable media with the version of Pointsec Mobile currently installed on your device before upgrading to Pointsec Mobile Pocket PC 3.4.x.

Intermediate Upgrades Because of internal limitations, you must, in some cases, perform intermediate upgrade(s) before upgrading to the latest version. The following table shows suggested upgrade paths: Installed 3.0.x 3.1.x, 3.2.0, 3.2.1 Version: (ID 397521) (ID 453487)

 Upgrade to 3.1.x - 3.2.1. Upgrade to 3.2.2 - 3.3.x  Upgrade to 3.2.2 - 3.3.x Upgrade to the latest version.  Upgrade to the latest version Alternatively, you can remove the current installation and install the latest version.

Compatibility With Other Programs To avoid possible conflicts with other programs, do not encrypt the Program Files directory.

Page 12

Chapter 5 Known Issues

ID Description

533419 On Motorola MC75 devices, iis not possible to call a contact by selecting a contact from the contact list and pressing the send or call button.

529747 On AT&T HTC Pure devices, the call status window is not always shown when the user is making a phone call while Pointsec is locked.

528915 On HTC Touch HD 2 devices, the sometimes disappears when Pointsec is locked. The user is unable to unlock Pointsec, and has no access to the device.

528737 On HTC Tilt 2 devices, pressing a virtual "SEND TEXT" button during a phone call will end the call. The button should not be displayed at all.

528712 If the user makes or receives a phone call when the device is locked by Pointsec Mobile, and presses a button which belongs to a function not allowed by Pointsec, the device may hang. It will be impossible even to end the call. This problem may occur on HTC Tilt 2 devices.

528006 On Tilt 2 and Pure devices, when pressing the Call history or Contacts button in the phone application, the corresponding window is opened in the background and is not accessible to the user. After unlocking Pointsec, the user may have to close this window.

527973 On HTC Tilt 2 devices, the user cannot access call history when Pointsec is locked.

527941 On HTC Tilt 2 devices, it is sometimes impossible to access contacts when Pointsec is locked, even if this is allowed in the profile.

527768 On HTC Tilt 2 devices, if the user tries to make a phone call while Pointsec is locked, the device hangs.

527002 On HTC Touch Pure devices, the menu in the phone application can be accessed when Pointsec is locked, giving users unauthorized access to menu options.

526409 On HTC Pure devices, the user cannot access contacts when Pointsec is locked, even if this is enabled in profile.

518627 Motorola MC75 devices lack hardware reset functionality, which makes it impossible to hard reset the device when Pointsec Mobile is installed. To hard reset the device, you must first uninstall Pointsec Mobile and then perform a hard reset according to the instructions in the device manual.

514287 Contacts and call history can be accessed via the Phone application when Pointsec is locked, even if this has been disabled in the profile settings.

455895 If creating an installation set after removing the language add-on, the created installation set contains just an installation profile, no cab file. Workaround: Uninstall the plug-in, then reinstall it.

Page 13

Compatibility With Other Programs

ID Description

455893 There is sometimes a problem with multiple reboots during the removal of Pointsec Mobile from SE Xperia X1 devices. This occurs if the device enters standby mode.

Recommendation: Connect the device to external power while removing Pointsec Mobile from the device. This prevents the device from entering standby mode.

453902 Contacts are accessible even though Access contacts and call history is set to No in the profile, and Contacts cannot be opened with the contact button that appears after making a call. 399643

453901 When Pointsec Mobile is locked, pressing the hardware button ‘#’ in the phone application causes two characters to display instead of one.

453174 Cyberion Voice Commander is pre-installed on Glofiish x500 WM6. This generates a sharing violation when encrypting with a strict profile.

Workaround: Put %Program files%/Cyberion/ in the exclusion list.

453333 Sometimes the phone is not accessible before the user enters the PIN/PicturePIN/password after a soft reset.

453225 Receiving an incoming call while changing the removable media password causes the media to be inaccessible.

Workaround: Eject the removable media.

452769 There are problems with using the call function in the first Pointsec authentication after a soft reset and in the Remote Help state. Users may not be able to make calls. If the user denies a call, the 452692 device may hang. 452691

Workaround: If device hangs, soft reset the device, or remove and re-insert the battery.

452694 Contacts or call history cannot be accessed on the following devices when Pointsec Mobile is locked: 452413  Intermec CN3  VPA Compact IV 452436 The user cannot make a second call after making a call at the first Pointsec authentication after soft reset.

Workaround: Soft reset the device.

451521 When the touch keyboard is used on Touch Dual devices: 399781  The alphanumeric authentication input field displays in the wrong place.  Occasionally, only an asterisk is displayed when the user inputs the password.  The default keyboard covers a majority of the screen. 399670 The key lock function does not block the green phone button, making inadvertent calling possible.

Known Issues Page 14

Compatibility With Other Programs

ID Description

399653 The Touch Dual native key lock function is activated automatically when the backlight turns off. However, when Pointsec Mobile is locked and the Touch Dual native key lock function activates, the unlock icon and dimmed pictures are not visible.

Workaround: Press the invisible unlock icon.

399152 ActiveSync does not connect after Pointsec authentication if the cable is inserted after Pointsec is locked.

Workaround: Reinsert the cable.

567307 If you send a profile update to an LG 750 then lock and unlock the device using Pointsec, the device may turn itself off (according to its power settings) and appear unresponsive. However, the update completes and the device reboots automatically. To avoid this behavior, switch off the power settings before updating the device.

567278 On an LG 750, even if the "Show incoming call information" option in the administrative console is set to "No", call information is still visible to the user.

567463 On Samsung 7610's default black and white color scheme, Pointsec related text is blocked out. To resolve this issue, choose another color scheme.

567200 To initiate a call using the contacts list on a Samsung 7350 locked by Pointsec, use the device keys or virtual keyboard on the touch screen. Using the touch screen without the virtual keyboard may result in failure.

567195 On a Samsung 7350 locked by Pointsec, call information is not shown on the screen. During the call, only the Pointsec authentication screen shows. To view and use the device's screen, first authenticate to Pointsec.

547133 While encrypting or decrypting an external memory card on the Htc touch 2, the Pointsec application looks as though it has ceased to function. The process is actually continuing, and will take a couple of minutes to complete.

Known Issues Page 15

Chapter 6 Additional Information

ID Description

453511 Previously, Pointsec Mobile identified the device using the device ID, which is a unique identifier according to the Windows Mobile standard. Certain OEMs, however, have not followed this standard. As a result, the recovery file name could not be guaranteed to be unique on devices that did not have a GSM or CDMA phone. If a recovery file from one device replaced the recovery file of another device, the administrator could not provide Remote Help to the user whose recovery file was overwritten. Pointsec Mobile now uses the UUID (Universally Unique Identifier) to identify the device. If you are upgrading from Pointsec Mobile Pocket PC 3.4.0 or earlier to the current version, ensure that you collect any new recovery files that might have been created by this upgrade.

395967 It is not possible to access contacts when Pointsec is locked on the following Palm devices. This is due to the method used by the manufacturer to implement the phone application.  Palm Treo 700w  Palm Treo 750  Palm Treo 750v 394455 Trend Micro does not always detect viruses placed on the device when Pointsec is installed, if ActiveSync is used for transferring files to the device. However, when the infected file is executed or opened, the virus is always detected.

N/A When configuring a device and entering an alphanumeric password, the device keyboard may disappear. This is a Windows Mobile problem and not caused by Pointsec Mobile Pocket PC. Tap the Info button to redisplay the keyboard.

N/A If you do this, you will have to hard reset the device before restoring the backup.

N/A It is not possible to change the custom PicturePIN graphics using an update profile.

N/A No authentication is made with ActiveSync using IR.

Page 16