Home > Ask the Security Experts > Application Security Questions & Answers > Is there a way to block iPhone widgets that bypass Web filters?
Ask The Security Expert: Questions & Answers
EMAIL THIS

Is there a way to block iPhone widgets that bypass Web filters?

Michael Cobb, featured expert EXPERT RESPONSE FROM: Michael Cobb, featured expert

Pose a Question
Other Security Categories
Meet all Security Experts
Become an Expert for this site


Enterprise IT tips and expert advice
Digg This!    StumbleUpon Toolbar StumbleUpon    Bookmark with Delicious Del.icio.us    Add to Google


>
QUESTION POSED ON: 08 May 2009
Our school's Web-filtering product (McAfee Inc.'s SmartFilter) blocks Facebook, but students can access it by using a Facebook iPhone widget. Is there a way to block the widget use on our network other than blocking their use of our Wi-Fi?

>
Smartphones are fast becoming a must-have device, particularly amongst the younger generation. Their popularity has not only created a whole new category of applications and widgets, but also a new set of problems for the IT administrator trying to maintain a safe and secure network. You're certainly not alone in trying to control how smartphones are used on your network, but your situation is slightly different to most enterprises, in that you have a mainly student user base.

I'm assuming you're running a network at a university or school of some kind and are using McAfee Inc.'s SmartFilter to control outbound Web access and protect against Web-based threats. SmartFilter is certainly a comprehensive Web-filtering product for controlling, filtering and monitoring Internet use. It allows customized policies by user, group, IP and IP range. Filters can be set by time of day, day the of week, file type and URL, using block and allow lists.

If students use their own iPhone and iPod Touch devices, however, to bypass Web filters, it's impossible to mandate what they can and can't install on their devices or which sites they can and can't visit. I'm sure, though, that you will have an acceptable usage policy covering what is and isn't permissible when students access and use the campus network. In this policy, you can state that accessing Facebook from any device via the campus network is not allowed. I accept that it is harder to dictate such a policy when users have their own devices, but if they are using your Wi-Fi to reach the Facebook site, then you have a legitimate case for expecting compliance with your usage guidelines.

The reason students want to use the campus Wi-Fi to access Facebook is because it's so much faster than using AT&T's EDGE network and much cheaper. If you use SmartFilter's reports, you can not only identify and document any inappropriate Web activity to enforce your Web-usage policies, but you can also use SmartFilter to control Web access via Wi-Fi, as well as conventional desktop/Ethernet access. You should explain why you're taking this step, though, such as to preserve bandwidth for work-related activities and reduce legal liability. Students will, of course, still be able to access Facebook from their own iPhones using EDGE, but that's not your problem.

It's worth taking steps to instill an understanding of the security threats and effects that certain activities can have on bandwidth, because you will have to contend with the next big thing: Skype, which has quickly become the most popular download at Apple's iPhone software store. Interestingly, mobile carriers in the U.S., Canada and Germany, such as AT&T, Rogers and T-Mobile, have blocked Skype from their networks so that it can be run only over a local Wi-Fi connection. These organizations defend what they see as their right to determine how their networks are used. You must do the same.


BROWSE BY TAG
Application Security,   Web Security Tools and Best Practices,   Web Application Security,   Application and Platform Security,   Network Device Management,   Network Security: Tools, Products, Software,   Enterprise Network Security,   VIEW ALL TAGS

Digg This!    StumbleUpon Toolbar StumbleUpon    Bookmark with Delicious Del.icio.us    Add to Google



RELATED CONTENT
Application Security
Do Facebook URL security concerns justify blocking social networks?
Should enterprises be concerned with Twitter in the workplace?
Are there still Google Desktop security problems?
Will an application usage policy best control network bandwidth?
Can an IP spoofing tool be used to spam SPF servers?
How can URL-shortening services be manipulated?
Is my security program ready for Web application firewall deployment?
How to ensure the security of a shopping cart application
When to use the service features of the Metasploit hacking tool
Preventing cross-site request forgery attacks

Web Application Security
Black box and white box testing: Which is best?
InZero Systems launches hardware-based security gateway
Web application vulnerability assessment shows patching progress
Preventing SQL injection attacks: A network admin's perspective
Cisco acquires SaaS security vendor ScanSafe
Web application firewall use goes beyond compliance, company finds
Gumblar Trojan drive-by exploits spike following Adobe update
Some Facebook applications lead to Russian attack sites
Barracuda acquires Purewire expanding Web security reach
An enterprise strategy for Web application security threats

Network Device Management
How to prepare for a secure network hardware upgrade
Researchers find thousands of flawed embedded devices
Will an application usage policy best control network bandwidth?
What is the difference between static and dynamic network validation?
How to manage network bandwidth with distributed ISP bandwidth
DNSSEC deployments gain momentum since Kaminsky DNS bug
Firewall rule management best practices
What are best practices for fiber optic cable security?
The requirements for being a PCI DSS-compliant service provider
Enterprise UTM security: The best threat management solution?

RELATED GLOSSARY TERMS
Terms from Whatis.com − the technology online dictionary
anonymous Web surfing  (SearchSecurity.com)
buffer overflow  (SearchSecurity.com)
cache cramming  (SearchSecurity.com)
cookie poisoning  (SearchSecurity.com)
dictionary attack  (SearchSecurity.com)
distributed denial-of-service attack  (SearchSecurity.com)
JavaScript hijacking  (SearchSecurity.com)
National Computer Security Center  (SearchSecurity.com)
threat modeling  (SearchSecurity.com)
trigraph  (SearchSecurity.com)

RELATED RESOURCES
2020software.com, trial software downloads for accounting software, ERP software, CRM software and business software systems
Search Bitpipe.com for the latest white papers and business webcasts
Whatis.com, the online computer dictionary



Search and Browse the Expert Answer Center
Search and browse more than 25,000 question and answer pairs from more than 250 TechTarget industry experts.
Browse our Expert Advice



Find Security Solutions for Your Business
TechTarget Security Media
Information Security View this month\\'s issue and subscribe today.
Information Security Decisions Apply online for free conference admission.
SearchSecurity.com
HomeNewsMagazineMultimediaWhite PapersLearningAdviceTopicsEventsAbout Us

About Us  |  Contact Us  |  For Advertisers  |  For Business Partners  |  Site Index  |  RSS
TechTarget provides technology professionals with the information they need to perform their jobs - from developing strategy, to making cost-effective purchase decisions and managing their organizations' technology projects - with its network of technology-specific websites, events and online magazines.

TechTarget Corporate Web Site  |  Media Kits  |  Site Map




All Rights Reserved, Copyright 2003 - 2009, TechTarget | Read our Privacy Policy
  TechTarget - The IT Media ROI Experts