Recommended Application Policy for Secure / Work Mail and Symantec Secure Web

Products

• Symantec Sealed
• TouchDown
• Mobility Suite

Issue/Introduction

What is the recommended Application Policy for Symantec Secure Email? 

Communication is blocked by policy
SD Card storage is not enabled in policy
Web site is not displayed

Cause

SD card storage is disabled and/or network access controls restrict email content or web links from being accessed by the client

Resolution

Use following recommended settings as part of the Application Policy managing Symantec Secure Email:

SD card storage permitted
Encryption Enabled

Network Access Control Policy should include the following:
Whitelist: *:*

The main reason we recommend allowing all locations for Secure Web is that each web page pulls from many sources.  Some sources are not vital to the rendering of the page while others will cause the page to not render properly or not at all.  For example, www.symantec.com pulls from more locations than just symantec.com.  It also uses: bs.serving-sys.com; cache.dtmpub.com; img-en25.com; login.dotomi.com; nexus.ensighten.com; secure-ds.serving-sys.com; symantec.tt.omtrdc.net; tags.bkrtx.com and tags.bluekai.com.  While some of these sources are vital to the proper rendering of www.symantec.com.  Each would need to be added to the whitelist for this single web-site page to load properly.

Applies To

Mobile devices running the Symantec Secure Email Client or Secure Web and managed by Symantec Mobility Suite