SMM: Older Windows Mobile/CE Devices Unable to Communicate After SSLv3 "Poodle" Fix

Products

• Mobile Management

Issue/Introduction

Symantec recommends that customers implement any recommended Microsoft fixes or workarounds in remedy to the SSLv3 "Poodle" vulnerability (CVE-2014-3566).  Please reference Microsoft article: technet.microsoft.com/en-us/library/security/3009008.aspx

After disabling SSLv3 in Windows Server, Symantec Mobile Management and Symantec Mobile Security customers may find older Windows Mobile/CE devices are unable to communicate with the Mobile Management Server or Mobile Security Gateway.  Windows Mobile based on Windows CE 3.0 (Pocket PC 2002 and older) are unable to communicate.

Cause

The SSLv3 workaround disables the SSLv3 protocol at the Mobile Management server.  This prevents all devices from using the SSLv3 protocol. 

Microsoft Windows Mobile based on Windows CE 3.0 (Pocket PC 2002 and older) will only support up to SSLv3.  These devices will not support the newer TLS protocol.

Resolution

Symantec recommends upgrading the device to a more modern operating system that supports the TLS protocol.

Applies To

Symantec Mobile Management

Symantec Mobile Security

Microsoft Windows Mobile/CE

Windows Server 2008 R2