University Mobile Platform Guide for LSPs

Introduction:

This guide is intended to give Local Support Providers guidance when considering a mobile device purchase. Information Systems & Computing (ISC) supports certain classes of handheld computers, notably Smartphones, Tablets and BlackBerry devices when connecting to ISC's central services. ISC will make a best effort attempt to assist LSPs with mobile device issues in other circumstances, though with the exception of support for devices compatible with ISC's Microsoft Exchange and Zimbra services, we cannot guarantee central computer system interoperability.

This guide documents what is supported by ISC. Local support available from schools and centers may vary. As always, faculty and staff should speak with their LSP to determine which product(s) are supported or recommended within their environment before choosing a device.

Life Cycle:

• These devices are subject to more day-to-day stresses than a conventional laptop or desktop
• Rapid development by vendors means that these devices are being improved (and will be made obsolete) at a faster rate than conventional computers
• The fast release cycles for all carriers mean manufacturers have reduced incentives to provide vital updates for devices more than a year old

Minimum Configurations:

• 16GB of on-board storage
• "4G" connectivity for cellular devices

Supported Platforms & Compatibilities

	Android	BlackBerry	iOS	webOS	Windows Phone 7
Newest/oldest supported version	4.1 on "Nexus" devices1	7.0/4.3	5.1.1/4.3.5	3.0.4/1.2	1.5/1.2
AirPennNet-Help	Most devices	N	Y	N	N
Exchange	4.1 on "Nexus" devices1	Uses BES2	Y	Y	Y
Zimbra	4.1 on "Nexus" devices1	Unsupported	Y	Y	Y
PennNet Phone voicemail attachment playback	Playback fails on most devices	Y	Y3	Y	Y3
Security	Poor1	Excellent	Fair	Poor	Poor
1Exchange and Zimbra can be used on non-Nexus devices via the supported & reccomended Divide client, a secure, reliable EAS client for Android.
2 BES usage incurs extra charges per month
3 Voicemail attachments are played via the system speaker instead of the earpiece

Platform Snapshots (Click to expand)

Android

• Overview: Stock versions of Android 4.x, as present on "Nexus" devices, are supported by Information Systems and Computing. Those wishing to use Android should purchase devices such as the Galaxy Nexus or Nexus 7. Devices with UI overlays are not supported. UI overlays impact core device functionality in unsupportable ways, and are often responsible for security, email, calendaring, and other problems. While such devices are unsupported, ISC recognizes that such devices will sometimes be purchased in a BYOD scenario. Such devices should use the Divide client, as noted below, for connecting to Exchange or Zimbra. "Rooted" devices are not supported under any circumstances.
• Security: "Nexus" devices with stock Android generally obey Exchange ActiveSync security policies and remote wipe commands. Devices with UI overlays do not respond to EAS policies in a predictable manner. Android 2.x doesn't support encryption at the platform level, and all data on the device can be accessed via USB if it is lost or stolen. Android 3.x and later devices support disk encryption, but this encryption only prevents data on the device from being accessed if the device has been turned off. When turned on, all data on the device can be accessed via USB if it is lost or stolen.
• Exchange & Zimbra: Devices running stock Android are supported on Exchange and Zimbra. On Nexus devices with stock Android, basic email, contact, and calendaring via Exchange ActiveSync is present. Folders are browsable, but do not necessarily show up in proper folder heirarchies. Mail is not searchable. Conversations are not grouped by threads. Calendar invitations can be received, though sending is occasionally unsuccessful. Calendar data generally displays well, but most calendar management should be reserved for dedicated clients like Outlook. Contact syncing can occasionally experience errors. On devices with UI overlays, various custom clients can interact with mail, contacts, and calendar data in inconsistent and unexpected ways and Divide should be used instead of the built-in EAS client.
• Divide: Divide is an alternative Exchange ActiveSync client for Android that combines a reliable EAS environment with a consistent interface and robust security. Combined with a VPN, Divide provides levels of security similar to that of a BlackBerry connecting via a BES. The Divide client is free. Please see ISC's Divide product page for more information.
• AirPennNet: XpressConnect, via AirPennNet-Help, works for most devices with stock Android, and many devices with UI overlays.
• PennNet Phone voicemail attachments: Most Android devices cannot play back VOIP voicemail received on the device via email. ISC is looking into third-party utilities that may permit playback.
• Documentation links:Configuration instructions for Exchange Configuration instructions for Zimbra, Divide configuration for Exchange,Divide configuration for Zimbra, XpressConnect Known Issues: Android

BlackBerry OS

• Overview: BlackBerry OS devices still feature the best security on a mobile device and have the best email experience for users who are heavily email-centric. BlackBerry OS 7 features incremental improvements in the OS that make it more competitive with other modern platforms, including improved browsing and graphics display. BlackBerry OS 7 scores 100/100 on the Acid3 test. PLEASE NOTE: BlackBerry OS is distinct from the BlackBerry PlayBook OS, which runs a distinct Unix-based operating system. This OS does not currently have first-party email connectivity and will be evaluated by ISC when it does.
• Security: BlackBerry devices running the BlackBerry OS have the best security of any platform, featuring FIPS certification, robust encryption in over- the- air transmission of messages for BES-connected devices, full device encryption, and strict adherence to security policies. BlackBerry devices are strongly recommended for any users who interact with sensitive information on their mobile devices.
• Exchange & Zimbra: BlackBerry devices must be connected via the BlackBerry Enterprise Server. BES connected devices feature robust email, contact, and calendar management. ISC hosts a BES on Exchange. ISC no longer hosts a Zimbra BES.
• AirPennNet: BlackBerry OS devices do not support TTLS/PAP and do not work on AirPennNet. RIM has not indicated that they will add TTLS/PAP in future BlackBerry OS releases.
• PennNet Phone voicemail attachments: BlackBerry devices can play back VOIP voicemail received on the device via email.
• Documentation links: Exchange BlackBerry Activation, XpressConnect Known Issues: BlackBerry OS

iOS

• Overview: iOS is Apple's wildly successful mobile platform. iOS has a significant presence on campus in the form of iPhones, iPads, and iPod Touches. The platform performs basic tasks very well and has a very robust app store that meets many specific needs.
• Security: Current iOS devices obey the University's required Exchange ActiveSync security policies and remote wipe commands. iOS devices, starting with the iPhone 3GS, have supported device encryption. However, this encryption has been circumvented numerous times in the past few years via various publicly known exploits. ISC considers this encryption to be a nice feature, but insufficient to protect truly sensitive information. Users accessing sensitive information on their devices are urged to get a BlackBerry.
• Exchange & Zimbra: iOS devices are supported on both Exchange and Zimbra. Email, contact syncing, and calendaring are present and work with most common features via Exchange ActiveSync. Folders are browsable, and conversations can be grouped by threads. Only mail stored on the device can be searched. Calendar invitations can be received and sent, though users should be careful not to duplicate event management in other clients. Events should be not be modified on an iOS device.
• AirPennNet: XpressConnect, via AirPennNet-Help, works well with iOS.
• PennNet Phone voicemail attachments: iOS devices can play back VOIP voicemail received on the device via email, however, email is played back via the device's internal speaker and not the earpiece.
• Documentation links: Configuration for Exchange, configuration for Zimbra, configuration for AirPennNet when not using XpressConnect, XpressConnect Known Issues: iOS

webOS

• Overview: webOS is HP's mobile platform available in various devices. webOS is an intuitive operating system with very fluid multitasking. It is particularly well suited to first-time smartphone and tablet users, who tend to be very happy with webOS devices. HP's mobile strategy has recently come into question and webOS's future is uncertain. Until it is clear that webOS will continue to be maintained, other mobile platforms should be considered.
• Security: webOS devices obey required Exchange ActiveSync security policies and remote wipe commands. webOS does not currently support encryption at the platform level, and all data on the device can be browsed via USB if it is lost or stolen.
• Exchange & Zimbra: webOS devices are supported on both Exchange and Zimbra. Email, contact syncing, and calendaring are present and work with most common features. Folders are browsable. Conversations cannot be grouped by threads. Only mail stored on the device can be searched. Calendar invitations can be received and sent, though users should be careful not to duplicate event management in other clients. Events should be not be modified on a webOS device.
• AirPennNet: webOS does support 802.1X TTLS/PAP, but XpressConnect does not yet function with webOS. webOS compatibility for XpressConnect has been requested from the vendor.
• PennNet Phone voicemail attachments: webOS devices can play back VOIP voicemail received on the device via email.
• Documentation links: Configuration for Exchange, configuration for Zimbra, XpressConnect Known Issues: webOS

Windows Phone 7

• Overview: Windows Phone 7 is fully supported, though those considering a Windows Phone device should consider waiting until Windows Phone 8 is released this autumn. Windows Phone 8 will be a significantly more feature-rich, enterprise-friendly release that will not be backwards compatible with Windows Phone 7 devices. Windows Phone 7 is developed with more of a consumer focus than Microsoft's prior enterprise-centric mobile operating systems, and will receive at least one more major update before being End of Lifed. Users should not expect Windows Phone 7 devices to be compatible with legacy Windows Mobile programs, or be at all familiar to interact with.
• Security: Windows Phone 7 devices obey required Exchange ActiveSync security policies and remote wipe commands. Windows Phone 7 does not currently support encryption at the platform level, and all data on the device can be browsed via USB if it is lost or stolen.
• Exchange & Zimbra: Windows Phone 7 devices are supported on both Exchange and Zimbra. Email, calendar, and contact management are present with folders browsing and conversation threading. Mail present on the device can be searched. Calendar invitations can be received, though invitations can only be sent to recognized contacts. Users should be careful not to duplicate event management in other clients. Events should not be modified on a Windows Phone 7 device.
• AirPennNet: Windows Phone 7 devices do not support 802.1X/ TTLS/PAP. Microsoft has not indicated when they may support this protocol.
• PennNet Phone voicemail attachments: Windows Phone 7 devices with the NoDo update and later can play back VOIP voicemail received on the device via email, however, email is played back via the device's internal speaker and not the earpiece.
• Documentation links: Configuration for Exchange, configuration for Zimbra, XpressConnect Known Issues: Windows Phone 7

Return to top

Page maintained by Ted Moskalenko
Updated February 4, 2013
Next update as needed