Pointsec Mobile Pocket PC 3.4.4 Release Notes

Revised: July 8, 2009 This Release Notes document provides essential operating requirements and describes known issues for Pointsec Mobile Pocket PC 3.4.4. Review this information before installing this product.

Note - There may be an updated version of this document and of the other documents you received with your copy of Pointsec Mobile Pocket PC. You can access the latest version at: http://www.checkpoint.com/support/

In This Document

About This Document page 1 About Pointsec Mobile Pocket PC page 2 New in This Release page 2 Supported Devices page 2 3rd-Party Software page 3 System and Hardware Requirements page 4 General Recommendations page 4 Compatibility Between Releases page 5 Compatibility With Other Programs page 6 Known Issues in This Release page 6 FYI page 9 Documentation Feedback page 10

About This Document This document contains information about Pointsec Mobile Pocket PC version 3.4.4, such as which problems have been fixed since the previous release and system requirements. In this document, the abbreviation N/A is used. N/A means Not Applicable. Pointsec Mobile Pocket PC is also referred to as Pointsec Mobile or Pointsec throughout the documentation. Releases prior to version 3.3 are referred to by the previous name, that is, Pointsec for Pocket PC ( 5). In the 3.4 release, (Windows Mobile 5) was dropped from the product name.

Copyright © 2009 Pointsec Mobile Technologies AB, a Check Point Software Technologies company. All rights reserved 1 About Pointsec Mobile Pocket PC

About Pointsec Mobile Pocket PC Pointsec Mobile Pocket PC provides users of handheld devices powered by Windows Mobile operating systems (Windows Mobile 5.0, 6, 6.1 and 6.5 Classic, and Professional versions) with automatic, real-time encryption of data including Outlook E-mail and Notes - providing convenient and enforceable handheld security for enterprises on the move.

New in This Release In this release, the following has been added or changed:

New Function in This Release • Support for Windows Mobile 6.5

New Devices These devices are added in this version: • HTC Touch Pro2 WM 6.5 • HTC Touch Pro2 WM 6.1 • HTC Touch Diamond2 WM 6.1

Supported Devices The following table contains the devices that are supported at the time of the release of Pointsec Mobile Pocket PC 3.4.4. However, the list is subject to change. To see a current list of supported Pocket PC devices, please visit http://www.checkpoint.com/supportedhandhelds/

Table 1 Supported Devices

Windows Mobile 5.0 Devices Windows Mobile 6 Devices Windows Mobile 6.1 Devices Windows Mobile 6.5 Devices Alltel 6700 (Audiovox 6700) GloFiish X500 AT&T HTC P4600 HTC Touch Pro2 Cingular 8125 GloFiish M700 AT&T (LG) Incite Cingular 8525 HP iPAQ 100 series AT&T Samsung SGH-i907 Cingular Palm 750 HP iPAQ 200 series AT&T Tilt (8925) Dell Axim X51v HP iPAQ 600 series HTC Touch Pro E-Ten Glofiish M700 HTC P4350 HTC Touch Pro2 E-Ten Glofiish X500 HTC Touch Cruise HTC Touch Diamond Fujitsu Siemens Pocket LooX HTC Touch (P3450) HTC Touch Diamond2 N520 HP iPAQ 6815 HTC Touch Dual HTC TyTN II (P4550) HP iPAQ 6915 HTC TyTN HP iPAQ hw6925 HTC TyTN II (P4550) Sprint Mogul (PPC-6800) HP iPAQ hx2190 HTC X7501 HP iPAQ hx2490 Palm Treo 750 Vodafone SonyEricsson X1 Xperia HP iPAQ hx2790 Palm Treo 750v HTC P3300 Sharp WS011SH HTC P3600 Verizon Samsung SCH-i760 HTC P4350 Vodafone v1520

Pointsec Mobile Pocket PC 3.4.4 Release Notes. Last Update — July 8, 2009 2 3rd-Party Software

Table 1 Supported Devices

Windows Mobile 5.0 Devices Windows Mobile 6 Devices Windows Mobile 6.1 Devices Windows Mobile 6.5 Devices HTC TyTN Vodafone v1615 HTC X7500 VPA Compact IV HTC Z i-mate JAMin i-mate JASJAR i-mate K-JAM Intermec CN3 Palm Treo 700w Palm Treo 700wx Palm Treo 750v Palm Treo 750 EU Version Palm Treo 750 US Version Qtek 9000 Qtek 9100 Qtek s200 Sharp/Willcom W ZERO3 WS003SH Sharp/Willcom W ZERO3 WS004SH Sharp/Willcom W ZERO3 WS007SH SoftBank x01H Symbol MC7095 T-Mobile MDA Pro T-Mobile MDA Vario Vodafone v1605 VPA Compact GPS

3rd-Party Software Pointsec Mobile Pocket PC 3.4.4 is interoperable with the following 3rd-party products: • SEVEN Always-On Mail 5.0.11 • MS Exchange SP2 • Mformation 4.0 • Sybase iAnywhere OneBridge 5.5 • Intellisync Mobile Suite 8.0 • ActiveSync 4.5 • Norton Security 5.0 • Trend Micro AntiVirus 3.0 • F-Secure Mobile Anti-Virus 4.6

Note - Pointsec Mobile may not be interoperable with third-party data encryption applications.

Pointsec Mobile Pocket PC 3.4.4 Release Notes. Last Update — July 8, 2009 3 System and Hardware Requirements

System and Hardware Requirements

Disk and Memory Space

Table 2 Disk and Memory Space

Component Space Administrator’s PC 15 MB for Pointsec Mobile Device Approximately 1.9 MB of free storage memory for Pointsec Mobile. (Memory Approximately 1 MB of free space to allow for encryption of data on Card) removable media.

Note: Removable media can become corrupt if you attempt to encrypt it when it is full.

Operating Systems and Software

Table 3 Operating Systems and Software

Component Operating system and software Administrator’s PC • Microsoft Windows 2000 Professional, XP Professional, and Vista • Pointsec Administration Console 1.1.1 or later. For requirements regarding Pointsec Administration Console, please see the Pointsec Administration Console Release Notes. • For 2000 and XP: Microsoft ActiveSync software 4.2 or later. • For Vista: Microsoft Windows Mobile Device Center. Client PC • Microsoft Windows 2000 Professional, XP Professional, and Vista • For 2000 and XP: Microsoft ActiveSync software 4.2 or later. • For Vista: Microsoft Windows Mobile Device Center. webRH server • For requirements on the webRH server, see the documentation accompanying SmartCenter for Pointsec—webRH Device • Windows Mobile 5.0, Windows Mobile 6 Classic, and Windows Mobile 6 Professional • Check your hardware vendor’s web site for the latest end-user updates.

Account Permissions Required

Table 4 Account Permissions Required

Account Rights required for folder User Write, read and execute rights to the recovery folder

Hardware

To install Pointsec Mobile on a device, you need a Pocket PC device cradle or ActiveSync cable connected to the workstation, or a network sync connection.

General Recommendations We strongly recommend that you:

Pointsec Mobile Pocket PC 3.4.4 Release Notes. Last Update — July 8, 2009 4 Compatibility Between Releases

• Always follow the documented procedures for installing, removing and upgrading Pointsec Administration Console and Pointsec Mobile. • When upgrading Pointsec Mobile software on phones, always upgrade to the latest version of Pointsec Administration Console. • Do not soft reset a device when installing, removing, or upgrading Pointsec Mobile, or when using Remote Help. • Do not attempt to access removable media when installing, removing, or upgrading Pointsec Mobile on a device. • Always back up data on devices and removable media before installing, removing, or upgrading Pointsec Mobile. • When installing, removing or upgrading Pointsec Mobile, ensure that the device is • on external power • not configured to power off if unused. • On Pointsec Mobile-protected devices, do not rename or move files used by Pointsec Mobile. • When saving installation sets or update profiles on the network, you must mount the drive first • Do not attempt to encrypt full removable media. See the section “Disk and Memory Space” for more information.

About Wireless Communication

You should be aware that on a device that has wireless communication activated, it may be possible for unauthorized persons to use the wireless communication to access files on the device.

Compatibility Between Releases

Upgrading Pointsec Mobile Pocket PC on Devices

You can upgrade to this version of Pointsec Mobile Pocket PC only from Pointsec for Pocket PC or Pointsec Mobile Pocket PC 3.x.

Removable Media Encryption Functionality

Pointsec Mobile Pocket PC 3.4.x’s removable media encryption functionality is not compatible with that of previous versions of Pointsec Mobile. Ensure you decrypt the removable media with the version of Pointsec Mobile currently installed on your device before upgrading to Pointsec Mobile Pocket PC 3.4.x.

Intermediate Upgrades

Because of internal limitations, you must, in some cases, perform intermediate upgrade(s) before upgrading to the latest version. The following table shows suggested upgrade paths:

Table 5 Upgrade Paths Installed 3.0.x 3.1.x, 3.2.0, 3.2.1 Version: (ID 397521) (ID 453487)

Pointsec Mobile Pocket PC 3.4.4 Release Notes. Last Update — July 8, 2009 5 Compatibility With Other Programs

Table 5 Upgrade Paths

1. Upgrade to 3.1.x - 3.2.1. 1. Upgrade to 3.2.2 - 3.3.x 2. Upgrade to 3.2.2 - 3.3.x. 2. Upgrade to the latest version. 3. Upgrade to the latest version. Alternatively, you can remove the current installation and install the latest version.

Compatibility With Other Programs To avoid possible conflicts with other programs, do not encrypt the Program Files directory.

Known Issues in This Release The following are known issues in this release:

Table 6 Known Issues in This Release ID Short Description Description/Info 455895 After removing language add-on: If creating an installation set after removing the language cab file missing in installation add-on, the created installation set contains just an set installation profile, no cab file. Workaround: Uninstall the plug-in, then reinstall it. 455893 SE Xperia X1: Device sometimes There is sometimes a problem with multiple reboots during reboots during removal the removal of Pointsec Mobile from SE Xperia X1 devices. This occurs if the device enters standby mode.

Recommendation: Connect the device to external power while removing Pointsec Mobile from the device. This prevents the device from entering standby mode. 453902 Samsung SCH-i760, Touch Contacts are accessible even though Access contacts and 452456 Dual, Vodafone v1520: Contacts call history is set to No in the profile, and Contacts cannot 399643 are accessible even when be opened with the contact button that appears after making prohibited in the profile a call. 453901 Samsung SCH-i760: The When Pointsec Mobile is locked, pressing the hardware hardware button ‘#’ produces button ‘#’ in the phone application causes two characters to double characters display instead of one. 453174 Glofiish x500 WM6: Voice Cyberion Voice Commander is pre-installed on Glofiish x500 commander interoperability WM6. This generates a sharing violation when encrypting with a strict profile.

Workaround: Put %Program files%/Cyberion/ in the exclusion list. 453333 Palm 750v WM5.0: Cannot Sometimes the phone is not accessible before the user enters access phone before first the PIN/PicturePIN/password after a soft reset. authentication 453225 Palm 750v WM5.0: Access to Receiving an incoming call while changing the removable removable media hangs when media password causes the media to be inaccessible. receiving calls while changing removable media password Workaround: Eject the removable media. 452845 Internal storage not encrypted The following devices have an internal storage area that 398982 Pointsec Mobile does not recognize as writable storage: • HP iPAQ 200 series • HP iPAQ 600 series • Intermec CN3

Pointsec Mobile Pocket PC 3.4.4 Release Notes. Last Update — July 8, 2009 6 Known Issues in This Release

Table 6 Known Issues in This Release ID Short Description Description/Info 452769 Intermec CN3: Problems with There are problems with using the call function in the first 452692 call function in first Pointsec Pointsec authentication after a soft reset and in the Remote 452691 authentication after a soft reset Help state. Users may not be able to make calls. If the user and in Remote Help state on denies a call, the device may hang. devices. Workaround: If device hangs, soft reset the device, or remove and re-insert the battery. 452694 Cannot access contacts and call Contacts or call history cannot be accessed on the following 452413 history on some devices devices when Pointsec Mobile is locked: • Intermec CN3 • VPA Compact IV 452436 Vodafone v1520: Not possible to The user cannot make a second call after making a call at make a second call after a call the first Pointsec authentication after soft reset. is made at first Pointsec authentication after restart Workaround: Soft reset the device. 451521 Touch Dual: Graphical errors in When the touch keyboard is used on Touch Dual devices: 399781 alphanumeric authentication • The alphanumeric authentication input field displays in screen the wrong place. • Occasionally, only an asterisk is displayed when the user inputs the password. • The default keyboard covers a majority of the screen. 399670 Touch Dual, Touch Cruise, and The key lock function does not block the green phone button, HTC 3600: Phone button making inadvertent calling possible. overrides key lock 399653 Touch Dual: The native key lock The Touch Dual native key lock function is activated icon and dimmed pictures are automatically when the backlight turns off. However, when not shown when Pointsec Mobile Pointsec Mobile is locked and the Touch Dual native key lock is locked. function activates, the unlock icon and dimmed pictures are not visible.

Workaround: Press the invisible unlock icon. 399152 ActiveSync connection not ActiveSync does not connect after Pointsec authentication if established after authentication the cable is inserted after Pointsec is locked.

Workaround: Reinsert the cable. 397607 LooX 520 and some Symbol ActiveSync connection does not work on LooX 520 and some devices: Cannot use ActiveSync Symbol devices, even if the user performs an ActiveSync authentication authentication.

Workaround: Turn off ActiveSync authentication in the installation profile.

Pointsec Mobile Pocket PC 3.4.4 Release Notes. Last Update — July 8, 2009 7 Known Issues in This Release

Table 6 Known Issues in This Release ID Short Description Description/Info 396925 Locking device with Intellisync After locking the device in Intellisync and synchronizing the does not work as intended device, a manual reboot is required instead of the reboot executing automatically. After the reboot, the Intellisync unlocking password does not unlock the device as expected. However, if the user enters an alphanumeric Pointsec Mobile password, he can unlock the device, but it will not function to its full capacity.

Recommendation: Do not use Intellisync Mobile Suite Theft Loss Protection.

Workaround: Use a Pointsec alphanumeric password to start the operating system. Do not use the Intellisync password. 396874 Outgoing calls not possible When Pointsec is performing cryptographic operations, while Pointsec performs (during install, removal, upgrade, update, and temporary cryptographic operations encryption) it is not possible to make an outgoing call. 396346 Incoming phone call is If the user receives a phone call immediately after he terminated when user soft-resets the phone, it will be terminated if he authenticates to Pointsec after a authenticates to Pointsec during the call. soft reset. 396241 Device limits webRH password It is possible to create a webRH profile with a password to 16 characters longer than 16 characters, however, when it is deployed on a device, the user can only enter a password with a maximum of 16 characters. Because the user cannot enter the entire webRH profile password, the device is rendered unusable, even after restart.

Workaround: Ensure that webRH profile passwords do not exceed16 characters before deploying the profiles to clients. 396140 Sharp Willcom WS007SH: If When installing Pointsec Mobile Pocket PC with Strict using Symantec AntiVirus and inclusion/exclusion list settings on a Sharp Willcom installing Pointsec with strict WS007SH device on which Symantec is installed, the encryption settings, the installation occasionally hangs. installation may hang Workaround: Use Typical or Relaxed inclusion/exclusion lists in the Pointsec profile. 395053 Disabled buttons not dimmed When Pointsec is locked, certain buttons in the phone application are disabled. However, they are not dimmed, which leads the user to believe that all buttons are available. 394894 Symantec AntiVirus live update If using Strict or Typical inclusion/exclusion lists, Symantec's upgrade sometimes fails LiveUpdate fails.

Workaround: Use Relaxed inclusion/exclusion lists. 394889 Update profiles not transferred The upgrade files are not automatically removed from the after upgrade update folder after upgrading Pointsec. Because of this, update profiles are not transferred to the device later.

Workaround: Manually remove the following files from the update folder: • Pointsec_Mobile_PPC__.cab • InstProf.PPP After removing these files, updates will work as normal.

Pointsec Mobile Pocket PC 3.4.4 Release Notes. Last Update — July 8, 2009 8 FYI

Table 6 Known Issues in This Release ID Short Description Description/Info 394816 Willcom devices: Pointsec Device: Willcom Mobile icon does not display On rare occasions, the Pointsec Mobile icon displays on the properly extreme far left of the screen, or may disappear altogether. Try soft resetting the device if this occurs. 394788 Call status button disabled When Pointsec is locked, the call status button is disabled during call during phone calls. 394428 OneBridge: Always On interferes When OneBridge Live Connect's feature ‘Always On’ is with suspend mode enabled, the ordinary power-off timer is deactivated and OneBridge prevents the device from going into suspend mode. This means that the screen lock will only be activated if power is manually turned off, Pointsec is manually locked, or if Pointsec Mobile's screen lock timer is used. 394261 Voice dial does not work when Voice tag and voice dial do not work when Pointsec is locked. Pointsec is locked 393246 Not possible to turn off flight If flight mode is activated, and Pointsecis locked, the user mode when Pointsec is locked must authenticate (or carry out a correct challenge/response procedure) before being able to turn off flight mode in order to make or receive phone calls. 392560 Key lock does not work after On K-JAM devices, the key lock does not work after Pointsec removal of Pointsec has been removed. Moreover, the Calendar and Contacts buttons at the bottom of the screen are sometimes not displayed.

FYI This section contains information that may be valuable in certain situations.

Table 7 FYI ID Short Description Description/Info 453511 Non-unique recovery file names Previously, Pointsec Mobile identified the device using the device ID, which is a unique identifier according to the Windows Mobile standard. Certain OEMs, however, have not followed this standard. As a result, the recovery file name could not be guaranteed to be unique on devices that did not have a GSM or CDMA phone. If a recovery file from one device replaced the recovery file of another device, the administrator could not provide Remote Help to the user whose recovery file was overwritten. Pointsec Mobile now uses the UUID (Universally Unique Identifier) to identify the device. If you are upgrading from Pointsec Mobile Pocket PC 3.4.0 or earlier to the current version, ensure that you collect any new recovery files that might have been created by this upgrade. 395967 Palm devices: Cannot access It is not possible to access contacts when Pointsec is locked contacts when Pointsec is locked on the following Palm devices. This is due to the method used by the manufacturer to implement the phone application. • Palm Treo 700w • Palm Treo 750 • Palm Treo 750v

Pointsec Mobile Pocket PC 3.4.4 Release Notes. Last Update — July 8, 2009 9 Documentation Feedback

Table 7 FYI ID Short Description Description/Info 394455 Trend Micro and ActiveSync: Trend Micro does not always detect viruses placed on the Virus detection sometimes device when Pointsec is installed, if ActiveSync is used for delayed transferring files to the device. However, when the infected file is executed or opened, the virus is always detected. N/A Issue with alphanumeric When configuring a device and entering an alphanumeric keyboard display password, the device keyboard may disappear. This is a Windows Mobile problem and not caused by Pointsec Mobile Pocket PC. Tap the Info button to redisplay the keyboard. N/A Restoring a Pointsec-protected If you do this, you will have to hard reset the device before device from a back-up taken restoring the backup. without Pointsec installed. N/A Updating Customized Graphics It is not possible to change the custom PicturePIN graphics using an update profile. N/A Authenticating via IR No authentication is made with ActiveSync using IR.

Documentation Feedback Check Point is engaged in a continuous effort to improve its documentation. Please help us by sending your comments to: [email protected]

Pointsec Mobile Pocket PC 3.4.4 Release Notes. Last Update — July 8, 2009 10