Pointsec Mobile Pocket PC 3.4.6 Release Notes 5 September 2010

© 2010 Check Point Software Technologies Ltd. All rights reserved. This product and related documentation are protected by copyright and distributed under licensing restricting their use, copying, distribution, and decompilation. No part of this product or related documentation may be reproduced in any form or by any means without prior written authorization of Check Point. While every precaution has been taken in the preparation of this book, Check Point assumes no responsibility for errors or omissions. This publication and features described herein are subject to change without notice. RESTRICTED RIGHTS LEGEND: Use, duplication, or disclosure by the government is subject to restrictions as set forth in subparagraph (c)(1)(ii) of the Rights in Technical Data and Computer Software clause at DFARS 252.227-7013 and FAR 52.227-19. TRADEMARKS: Refer to the Copyright page (http://www.checkpoint.com/copyright.html) for a list of our trademarks. Refer to the Third Party copyright notices (http://www.checkpoint.com/3rd_party_copyright.html) for a list of relevant copyrights and third-party licenses.

Important Information Latest Version The latest version of this document is at: http://supportcontent.checkpoint.com/documentation_download?ID=10692 For additional technical information, visit the Check Point Support Center (http://supportcenter.checkpoint.com).

Revision History Date

Description

5 September 2010

New device: SoftBank X05HT Improved formatting and document layout

21 January 2010

First release of this document

Feedback Check Point is engaged in a continuous effort to improve its documentation. Please help us by sending your comments (mailto:[email protected]?subject=Feedback on Pointsec Mobile Pocket PC 3.4.6 Release Notes).

Contents Important Information .............................................................................................3 Introduction .............................................................................................................5 What's New ..............................................................................................................5 New Devices in 3.4.6 ........................................................................................... 5 New Devices in 3.4.5 ........................................................................................... 5 Resolved Issues in 3.4.5 ..................................................................................... 6 System Requirements ............................................................................................7 Supported Devices .............................................................................................. 7 Third Party Software ............................................................................................ 9 Disk and Memory Space ..................................................................................... 9 Operating Systems and Software ........................................................................ 9 Permissions ........................................................................................................10 Upgrading ..............................................................................................................10 General Recommendations..................................................................................11 About Wireless Communication ..........................................................................11 Known Issues........................................................................................................12

New Devices in 3.4.6

Introduction Welcome to Pointsec Mobile Pocket PC version 3.4.6. This enterprise-grade remote access client for Windows Mobile handheld devices gives real-time data encryption -- including Microsoft Outlook E-mail and Notes -- and security. This Release Notes document contains resolved issues and supported devices.

What's New New supported device: SoftBank X05HT

New Devices in 3.4.6 These devices are newly supported in 3.4.6: 

SoftBank X05HT (WM 6.1)



HTC Touch HD 2 ( WM 6.5)



HTC Touch HD (WM 6.1)



Sony Ericsson Xperia X2 (WM 6.5)



Samsung B7610 (WM 6.1)



Symbol MC35 (WM 6.0)

New Devices in 3.4.5 These devices were introduced to Pointsec Mobile support in version 3.4.5: 

AT&T LG GW 820 (WM 6.5)



AT&T HP Glisten (WM 6.5)



Motorola MC75 (WM 6.1)



AT&T HTC Pure (WM 6.5)



AT&T HTC Tilt 2 (WM 6.5)

Introduction

Page 5

Resolved Issues in 3.4.5

Resolved Issues in 3.4.5 ID

Description

00452456

Vodafone v1520: Contacts were accessible even if Access contacts and call history was set to No in the profile. Contacts could not be opened with the contact button that appears after making a call. This problem has been solved on Vodafone v1520 devices.

00452845

Pointsec Mobile could not encrypt the internal storage area on the following devices:

00398982



HP iPAQ 200 series



HP iPAQ 600 series



Intermec CN3

This is fixed.

What's New

Page 6

Supported Devices

System Requirements To install Pointsec Mobile, you need a Pocket PC device cradle or ActiveSync cabled connected to a workstation, or a network sync connection.

Supported Devices These are the devices that are supported at the time of the release. This list can change. The current list of supported devices is on our website (http://www.checkpoint.com/supportedhandhelds/). Windows Mobile 5.0

Windows Mobile 6

Windows Mobile 6.1

Windows Mobile 6.5

Alltel 6700 (Audiovox 6700)

GloFiish X500

AT&T HTC P4600

AT&T LG GW 820

Cingular 8125

GloFiish M700

AT&T (LG) Incite

AT&T HP Glisten

Cingular 8525

HP iPAQ 100 series

AT&T Samsung SGH-i907

AT&T HTC Pure

Cingular Palm 750

HP iPAQ 200 series

AT&T Tilt (8925)

AT&T HTC Tilt 2

Dell Axim X51v

HP iPAQ 600 series

HTC Touch Pro

HTC HD mini

E-Ten Glofiish M700

HTC P4350

HTC Touch Pro2

HTC Touch HD 2

E-Ten Glofiish X500

HTC Touch Cruise

HTC Touch Diamond

HTC Touch Pro2

Fujitsu Siemens Pocket LooX N520

HTC Touch (P3450)

HTC Touch Diamond2

HTC Touch2

HP iPAQ 6815

HTC Touch Dual

HTC TyTN II (P4550)

Sony Ericsson Xperia X2

HP iPAQ 6915

HTC TyTN

Motorola MC75

Samsung B7610

HP iPAQ hw6925

HTC TyTN II (P4550)

Sony Ericsson Xperia X1

LG GM750

HP iPAQ hx2190

HTC X7501

Sprint Mogul (PPC-6800)

Samsung 7350

HP iPAQ hx2490

Palm Treo 750

Vodafone Palm Treo Pro

HP iPAQ hx2790

Palm Treo 750v

Vodafone Sony Ericsson Xperia X1

HTC P3300

Sharp WS011SH

HTC Touch HD

HTC P3600

Verizon Samsung SCHi760

SoftBank X05HT

HTC P4350

Vodafone v1520

HTC TyTN

Vodafone v1615

HTC X7500

VPA Compact IV

HTC Z

Symbol MC35

i-mate JAMin

System Requirements

Page 7

Supported Devices

Windows Mobile 5.0

Windows Mobile 6

Windows Mobile 6.1

Windows Mobile 6.5

i-mate JASJAR i-mate K-JAM Intermec CN3 Palm Treo 700w Palm Treo 700wx Palm Treo 750v Palm Treo 750 EU Version Palm Treo 750 US Version Qtek 9000 Qtek 9100 Qtek s200 Sharp/Willcom W ZERO3 WS003SH Sharp/Willcom W ZERO3 WS004SH Sharp/Willcom W ZERO3 WS007SH SoftBank x01H Symbol MC7095 T-Mobile MDA Pro T-Mobile MDA Vario Vodafone v1605 VPA Compact GPS

System Requirements

Page 8

Third Party Software

Third Party Software Pointsec Mobile Pocket PC 3.4.8 is interoperable with the following 3rd-party products: 

SEVEN Always-On Mail 5.0.11



MS Exchange SP2



Mformation 4.0



Sybase iAnywhere OneBridge 5.5



Intellisync Mobile Suite 8.0



ActiveSync 4.5



Norton Smartphone Security 5.0



Trend Micro AntiVirus 3.0



F-Secure Mobile Anti-Virus 4.6 Note - Sometimes Pointsec Mobile does not work with third-party data encryption applications.

Disk and Memory Space Component

Space

Administrator’s PC

15 MB for Pointsec Mobile

Device

Approximately 1.9 MB of free storage memory for Pointsec Mobile.

Removable Media (Memory Card)

Approximately 1 MB of free space to allow for encryption of data on removable media. Note: Removable media can become corrupt if you attempt to encrypt it when it is full.

Operating Systems and Software Component

Supported operating system and software

Administrator PC



Client PC

Microsoft Windows 2000 Professional, XP Professional, Vista



For 2000 and XP: Microsoft ActiveSync software 4.2 or later



For Vista: Microsoft Windows Mobile Device Center



Pointsec Administration Console 1.1.1 or higher



Microsoft Windows 2000 Professional, XP Professional, Vista



For 2000 and XP: Microsoft ActiveSync software 4.2 or later



For Vista: Microsoft Windows Mobile Device Center

webRH server

see accompanying documentation for webRH

Device

Windows Mobile 5.0, Windows Mobile 6 Classic, Windows Mobile 6 Professional

System Requirements

Page 9

Permissions

Permissions Account

Rights Required for folder

User

Read, write, execute rights to the recovery folder

Upgrading Upgrading Pointsec Mobile Pocket PC on Devices: You can upgrade to this version of Pointsec Mobile Pocket PC only from Pointsec for Pocket PC or Pointsec Mobile Pocket PC 3.x. You cannot upgrade to the same version that is already installed.

Removable Media Encryption Functionality Removable media encryption is not compatible with that of earlier versions of Pointsec Mobile. Make sure to decrypt the removable media with the version of Pointsec Mobile currently installed on the device before upgrading to Pointsec Mobile Pocket PC 3.4.x.

Recovery Files Earlier versions of Pointsec Mobile identified a device by the device ID. As a result, the recovery file name could not be guaranteed to be unique on devices that did not have a GSM or CDMA phone. If a recovery file from one device replaced the recovery file of another device, you could not give Remote Help to the user whose recovery file was overwritten. Pointsec Mobile now uses the UUID (Universally Unique Identifier) to identify the device. If you are upgrading from Pointsec Mobile Pocket PC 3.4.0 or earlier to the current version, collect all recovery files made by this upgrade.

Intermediate Upgrades Sometimes you must do an intermediate upgrade before you upgrade to this version. Or, you can uninstall and then install this version. 1. From 3.0.x, upgrade to a version between 3.1.x and 3.2.1. 2. From 3.1.x - 3.2.1, upgrade to a version between 3.2.2 and 3.3.x. 3. From 3.2.2 - 3.3.x, upgrade to 3.4.6.

Upgrading

Page 10

About Wireless Communication

General Recommendations 

Always follow the documented procedures for installing, removing and upgrading Pointsec Administration Console and Pointsec Mobile.



When upgrading Pointsec Mobile software on phones, always upgrade to the latest version of Pointsec Administration Console.



Do not soft reset a device when installing, removing, or upgrading Pointsec Mobile, or when using Remote Help.



Do not attempt to access removable media when installing, removing, or upgrading Pointsec Mobile on a device.



Always back up data on devices and removable media before installing, removing, or upgrading Pointsec Mobile.



When installing, removing or upgrading Pointsec Mobile, ensure that the device is 

on external power.



not configured to power off if unused.•



On Pointsec Mobile-protected devices, do not rename or move files used by Pointsec Mobile.



When saving installation sets or update profiles on the network, you must mount the drive first



Do not attempt to encrypt full removable media. For more information see the section on Disk and Memory Space.



To avoid conflicts with other programs, do not encrypt the Program Files directory.

About Wireless Communication Be aware that on a device with wireless communication activated, unauthorized persons can use the wireless communication to access files on the device.

General Recommendations

Page 11

About Wireless Communication

Known Issues ID

Description

533419

On Motorola MC75 devices, iis not possible to call a contact by selecting a contact from the contact list and pressing the send or call button.

529747

On AT&T HTC Pure devices, the call status window is not always shown when the user is making a phone call while Pointsec is locked.

528915

On HTC Touch HD 2 devices, the virtual keyboard sometimes disappears when Pointsec is locked. The user is unable to unlock Pointsec, and has no access to the device.

528737

On HTC Tilt 2 devices, pressing a virtual "SEND TEXT" button during a phone call will end the call. The button should not be displayed at all.

528712

If the user makes or receives a phone call when the device is locked by Pointsec Mobile, and presses a button which belongs to a function not allowed by Pointsec, the device may hang. It will be impossible even to end the call. This problem may occur on HTC Tilt 2 devices.

528006

On Tilt 2 and Pure devices, when pressing the Call history or Contacts button in the phone application, the corresponding window is opened in the background and is not accessible to the user. After unlocking Pointsec, the user may have to close this window.

527973

On HTC Tilt 2 devices, the user cannot access call history when Pointsec is locked.

527941

On HTC Tilt 2 devices, it is sometimes impossible to access contacts when Pointsec is locked, even if this is allowed in the profile.

527768

On HTC Tilt 2 devices, if the user tries to make a phone call while Pointsec is locked, the device hangs.

527002

On HTC Touch Pure devices, the menu in the phone application can be accessed when Pointsec is locked, giving users unauthorized access to menu options.

526409

On HTC Pure devices, the user cannot access contacts when Pointsec is locked, even if this is enabled in profile.

518627

Motorola MC75 devices lack hardware reset functionality, which makes it impossible to hard reset the device when Pointsec Mobile is installed. To hard reset the device, you must first uninstall Pointsec Mobile and then perform a hard reset according to the instructions in the device manual.

514287

Contacts and call history can be accessed via the Phone application when Pointsec is locked, even if this has been disabled in the profile settings.

455895

If creating an installation set after removing the language add-on, the created installation set contains just an installation profile, no cab file. Workaround: Uninstall the plug-in, then reinstall it.

455893

There is sometimes a problem with multiple reboots during the removal of Pointsec Mobile from SE Xperia X1 devices. This occurs if the device enters standby mode. Recommendation: Connect the device to external power while removing Pointsec Mobile from the device. This prevents the device from entering standby mode.

453902 399643

Contacts are accessible even though Access contacts and call history is set to No in the profile, and Contacts cannot be opened with the contact button that appears after making a call.

Known Issues

Page 12

About Wireless Communication

ID

Description

453901

When Pointsec Mobile is locked, pressing the hardware button ‘#’ in the phone application causes two characters to display instead of one.

453174

Cyberion Voice Commander is pre-installed on Glofiish x500 WM6. This generates a sharing violation when encrypting with a strict profile. Workaround: Put %Program files%/Cyberion/ in the exclusion list.

453333

Sometimes the phone is not accessible before the user enters the PIN/PicturePIN/password after a soft reset.

453225

Receiving an incoming call while changing the removable media password causes the media to be inaccessible. Workaround: Eject the removable media.

452769 452692 452691 452694 452413

452436

There are problems with using the call function in the first Pointsec authentication after a soft reset and in the Remote Help state. Users may not be able to make calls. If the user denies a call, the device may hang. Workaround: If device hangs, soft reset the device, or remove and re-insert the battery. Contacts or call history cannot be accessed on the following devices when Pointsec Mobile is locked: 

Intermec CN3



VPA Compact IV

The user cannot make a second call after making a call at the first Pointsec authentication after soft reset. Workaround: Soft reset the device.

451521

When the touch keyboard is used on Touch Dual devices:

399781



The alphanumeric authentication input field displays in the wrong place.



Occasionally, only an asterisk is displayed when the user inputs the password.



The default keyboard covers a majority of the screen.

399670

The key lock function does not block the green phone button, making inadvertent calling possible.

399653

The Touch Dual native key lock function is activated automatically when the backlight turns off. However, when Pointsec Mobile is locked and the Touch Dual native key lock function activates, the unlock icon and dimmed pictures are not visible. Workaround: Press the invisible unlock icon.

399152

ActiveSync does not connect after Pointsec authentication if the cable is inserted after Pointsec is locked. Workaround: Reinsert the cable.

397607

ActiveSync connection does not work on LooX 520 and some Symbol devices, even if the user performs an ActiveSync authentication. Workaround: Turn off ActiveSync authentication in the installation profile.

396925

After locking the device in Intellisync and synchronizing the device, a manual reboot is required instead of the reboot executing automatically. After the reboot, the Intellisync unlocking password does not unlock the device as expected. If the user enters an alphanumeric Pointsec Mobile password, he can unlock the device, but it will not function to its full capacity. Recommendation: Do not use Intellisync Mobile Suite Theft Loss Protection. Workaround: Use a Pointsec alphanumeric password to start the operating system. Do not use the Intellisync password.

Known Issues

Page 13

About Wireless Communication

ID

Description

396874

When Pointsec is doing cryptographic operations (during install, removal, upgrade, update, and temporary encryption), it is not possible to make an outgoing call.

396346

If a user receives a phone call immediately after a soft-reset, the call is terminated if the user authenticates to Pointsec during the call.

396241

You can make a webRH profile with a password that is longer than 16 characters, but a user can enter only 16 characters. Workaround: Make sure that webRH profile passwords do not exceed 16 characters.

396140

When installing Pointsec Mobile Pocket PC with Strict inclusion/exclusion list settings on a Sharp Willcom WS007SH device on which Symantec is installed, the installation sometimes hangs. Workaround: Use Relaxed inclusion/exclusion lists in the Pointsec profile.

395053

When Pointsec is locked, some buttons on the hone application do not work. But they are appear to be functional.

394894

If using Strict or Typical inclusion/exclusion lists, Symantec's LiveUpdate fails. Workaround: Use Relaxed inclusion/exclusion lists in the Pointsec profile.

394889

The upgrade files are not automatically removed from the update folder after upgrading Pointsec. Because of this, update profiles are not transferred to the device later. Workaround: Manually remove the following files from the update folder: 

Pointsec_Mobile_PPC__.cab



InstProf.PPP

394816

Willcom devices: On rare occasions, the Pointsec Mobile icon displays on the extreme far left of the screen, or may disappear altogether. Try soft resetting the device if this occurs.

394788

When Pointsec is locked, the call status button is disabled during phone calls.

394428

When OneBridge Live Connect ‘Always On’ is enabled, the ordinary power-off timer is deactivated and OneBridge prevents the device from going into suspend mode. The screen lock will only be activated if power is manually turned off, if Pointsec is manually locked, or if Pointsec Mobile's screen lock timer is used.

394261

Voice tag and voice dial do not work when Pointsec is locked.

393246

If flight mode is activated, and Pointsecis locked, the user must authenticate (or carry out a correct challenge/response procedure) before being able to turn off flight mode in order to make or receive phone calls.

392560

If you remove Pointsec from K-JAM devices, the key lock does not work, and the Calendar and Contacts buttons at the bottom of the screen are sometimes not displayed.

453511

You cannot access contacts when Pointsec is locked on Palm Treo devices: 700w, 750, 750v.

394455

Trend Micro does not always detect viruses on the device when Pointsec is installed, if ActiveSync is used for transferring files to the device. When the infected file is run or opened, the virus is always detected.

NA

When configuring a device and entering an alphanumeric password, the device keyboard may disappear. This is a Windows Mobile problem and not caused by Pointsec Mobile Pocket PC. Tap the Info button to redisplay the keyboard.

Known Issues

Page 14

About Wireless Communication

ID

Description

NA

If you restore a Pointsec-protected device from a backup taken without Pointsec installed, you must hard reset the device before restoring.

NA

You cannot change the custom PicturePIN graphics using an update profile.

NA

With ActiveSync using IR, no authentication is made.

Known Issues

Page 15