Nokia for business – Symbian

Security - Wide range of security features to protect both business and personal data.


Comprehensive and scalable security

To protect both personal and business data, Nokia Eseries smartphones offer a wide range of in-built security features. Enjoy device encryption, device locking, remote wiping, secure company intranet and browsing access, reduced malware and virus infection and secure end-to-end connections for safe usage of mobile push email for your mobile workforce.

Multi-level Security

Device and content security

Nokia Eseries are business-optimised smartphones offering built-in features as well as add-on applications to meet the security needs of an organization and individual business users. Various security features effectively protect confidential data stored on devices.

  • Device lock – Users have the option of activating a security key guard to lock the keypad on the device when it is not in use.
  • Remote lock – Remote locking allows a device lock to be activated remotely by the user or by the IT administrator. Device locking can be activated by sending a text message from another device or from a short messaging service (SMS) emulator, as long as a remote locking code is predefined in the device. If the device is locked and another person changes the SIM card, the device cannot be used.
  • Memory card security – Memory cards can be protected with a password, which is required each time someone tries to access information on the card.
  • Call barring – This feature allows the user or IT administrator to restrict incoming or outgoing calls, as well as access to international calls.
  • Certificates – Digital certificates are used to connect to a website in order to transfer confidential information, for example, when establishing a SSL/TLS connection. Certificates can also be used to check the authenticity of software the user intends to download, reducing the risk of viruses and malware. Certificates stored on Nokia Eseries smartphones are located in a secure area of the platform and its content is encrypted.
  • Device memory and memory card encryption – Nokia Eseries smartphones offer hardware accelerated device and memory card encryption support. Specifcations include:
    • Encryption cipher: Advanced Encryption Standard (AES) in the XTS mode (Institute of Electrical and Electronics Engineers (IEEE), P1619 Standard Architecture for Encrypted Shared Storage Media)
    • Encryption key length: 128 bits; Initialization vector:128 bits
    • Cryptographic operations are performed and keys are stored on protected hardware area

Secure connectivity

Mail for Exchange, Lotus Notes Traveler data connection

Mail for Exchange and IBM Lotus Notes Traveler mobile email clients support the use of Secure Sockets Layer (SSL)/Transport Layer Security (TLS) authentication and data encryption to establish a secured end-to-end https connection. For more details, download the "Mail for Exchange Security Datasheet" under the "More info" tab.

In addition, connections can also be tunnelled through mobile VPN. Nokia Mobile VPN client, which is preloaded in the Nokia Eseries smartphone range, uses the Internet Protocol Security (IPSec) standard and is compatible with leading brands’ VPN gateways. For more information, review the section on Nokia Mobile VPN below.

Secure browsing

The Nokia smartphone browser uses standard HTTP protocol over TCP/IP to connect to the web. The browser supports SSL/TSL protocols for security. For privacy, the user can choose from a number of auto-cleaning options to clear cache data, cookies, history, auto-bookmarks and stored form data including passwords entered into web forms.

WLAN

Various WLAN authentication and encryption features are supported, including WLAN EAP, WEP, WPA, TKIP, WPA2, 8021.x and AES.

Bluetooth® security

Nokia smartphones offer options for users to manage the Bluetooth® visibility on their device. For additional protection - and also to prevent unwanted connection requests - users can set the device to "hidden" mode.

VPN connection

Nokia Mobile VPN client is an IPSec virtual private network (VPN) application developed by Nokia. Nokia Mobile VPN allows users to browse intranet pages, access links to an intranet web page embedded in an email and make VoIP calls over secure connection. More details on Nokia mobile VPN can be found in the section below.

Trusted OS

Application signing

Nokia supports the Java Verified Program and the Symbian Signed application signing process. Digital signing is based on the standard Public Key Infrastructure (PKI) model. When an application is being installed on a Nokia smartphone, the application installer checks the certificate and compares it to the certificates in the device that are used in the application installation. If none of the certificates trust the signature, a warning message is displayed to the user. This apps signing and user warning process effectively prevents malware and viruses from being unknowingly installed on Nokia smartphones.

Device management

With device management, enterprises' IT administrators can support users taking new services and applications in use, modify the configuration of existing solutions with minimal effort, as well as implementing IT security policies on the phones. Nokia uses Open Mobile Alliance (OMA) standardized device management technology. Visit Device Management for more details.

To give a Microsoft Exchange Server IT administrator control of user devices, a comprehensive set of Microsoft Exchange ActiveSync policies are supported on Nokia smartphones running Mail for Exchange client. Enterprise IT administrators are able to mandate the use of device lock passwords, require alphanumeric passwords, minimum password lengths, set password expiration durations, remote wipe data and many other Exchange ActiveSync security policies, including:

  • Prevention of simple passwords
  • Track password history
  • Maximum inactivity timeout
  • Maximum password attempts
  • Wipe data after maximum number of password attempts
  • Device policy refresh
  • Control non provisionable devices access
  • Allow attachments to be downloaded on the device
  • Allow HTML email viewing
  • Allow synchronisation while roaming
  • Set maximum attachment size (kB)
  • Maximum calendar age filter
  • Maximum email age filter
  • Maximum email body truncation size

For more details, download the "Mail for Exchange Security Datasheet" in the More Info section.

Security applications

Complement additional security needs you may have with apps developed by trusted Nokia partners, available from Ovi Store. Input "Security" as your search term to find out exactly what apps can help strengthen your mobile security. Below you'll find even more apps, offered directly from our leading security vendor partners.

  • F-Secure Mobile Security
  • Kaspersky Mobile Security
  • Pointsec Mobile
  • RSA
  • SMobile Systems
  • Symantec
  • Trend Micro

F-Secure Mobile Security
F-Secure Mobile Security allows smartphone users to experience the full potential of their devices without the fear of mobile threats. In the unfortunate event your phone is lost, stolen, infected by mobile malware or even spied on, Mobile Security helps to safeguard your personal and confidential data. F-Secure Mobile Security makes your smartphone completely safe for today's connected life. Read more

Kaspersky Mobile Security
Kaspersky Mobile Security is world-class security software for Nokia devices. Use its Anti-theft capabilities and block, locate, trace your device when it is lost or stolen. Have your sensitive data encrypted. Stop unwanted calls and SMSs. Control your kid's calls and messages. Feel secure against viruses and network attacks. Feel confident and private with your Nokia and Kaspersky Mobile Security. Read more

Pointsec Mobile
Complete data security for smartphones. Pointsec mobile is the only solution needed to protect the data at rest on your mobile phone. With built-in On-the-fly encryption there is minimal user intervention when you want to view or edit your encrypted emails or files. Read more. Read more

RSA
RSA, The Security Division of EMC, provides the RSA SecurID two-factor authentication system that generates a one-time password every 60 seconds for secure access to network resources. RSA offers an RSA SecurID software token that runs on Nokia mobile devices, allowing IT administrators to make strong authentication a convenient part of doing business. Read more

SMobile Systems
SMobile Security Shield, Enterprise Edition, provides anti-malware, anti-spam, firewall, anti-theft components, and comprehensive policy management that allow an enterprise to control the applications running on their mobile devices. A multitude of application commands are available to the IT administrator through our hosted or deployed management console. Read more

Symantec
"Symantec Mobile Security 4.3 for Symbian OS protects Symbian OS Version 9.x, Nokia Series 60, and UIQ smartphones from malicious threats and network intrusions. It can automatically allow, deny access, or quarantine upon detecting an infected file. Centralized management enables administrators to configure, lock, and enforce security policies remotely or locally. Read more

Trend Micro
"Trend MicroTM Mobile Security can protect Smartphones and wireless handhelds against viruses, worms, Trojans, and short message service (SMS) text message spam. A new built-in firewall guards Wi-Fi-enabled devices against hackers, intrusions, and denial-of-service attacks. Enterprises can use Trend Micro Mobile Security to prevent data theft and mobile service disruptions, which can interfere with employee productivity. Mobile operators can also benefit by offering the security software to their customers as a pre-installed or aftermarket solution to protect their mobile devices. This helps operators maximize airtime and increase revenues while minimizing related customer service costs. Read more

Nokia Mobile VPN

Overview

Nokia E75 VPN Nokia Mobile VPN client extends your network to your mobile devices, so employees can connect to the intranet virtually anytime from anywhere. Create a seamless mobile office experience by providing users with access to company data and applications, intranet browsing and links directly from email, and the ability to make VoIP calls over a secure connection.

  • Helps to secure mobile connections for business use
  • Provides seamless access to company intranet
  • Support for remote device management with Open Mobile Alliance Device Management (OMA DM) scales up to large deployments

Nokia Mobile VPN client is an IPsec VPN client that helps to secure the connection to compatible intranet for access from mobile devices. It extends VPN use into compatible Nokia devices.

Features

  • Free of charge client enables you to integrate mobile devices to your existing compatible IT infrastructure
  • Supports multiple authentication methods
  • Supports VPN gateways from multiple vendors
  • Client supports over-the-air provisioning of VPN configuration and updates, adding a layer of security to mobile devices via a compatible OMA device management solution

Specifications

To use Nokia Mobile VPN you need the following:

  • Compatible Nokia device
  • Compatible VPN gateway
  • VPN policy file

Compatibility

Supported smartphones:

Supported VPN gateways:

  • Alcatel-Lucent Brick
  • Check Point VPN-1 NG
  • Cisco 3000 series Concentrator
  • Cisco ASA
  • Cisco ISR
  • Nokia IP VPN Gateway
  • Nokia Siemens Networks I-WLAN Solution

Supported authentication methods:

  • Two-factor authentication and legacy authentication
  • X.509v3 client certificates
  • IKE pre-shared keys
  • SIM and USIM authentication via IKEv2 and EAP-SIM or EAP-AKA

Certifications:

Configuration tools:

Remote management: