Blocking iCloud file transfer only on enterprise network

Question

Blocking iCloud file transfer only on enterprise network

I work in the tech industry at a large company. Security is a big concern for us and rightfully so. We have concerns regarding ability to transfer files over iCloud as it not as secure as other cloud services and does not meet our security standards. To address this issue, we have disabled iCloud access for all Macbooks and iPhones from all our networks making them pretty much useless. It is so bad that a lot of people are considering switching to PCs and Android phones. My question is: Is there a way to only block individual services on iCloud on your network? Primarily file transfers services on your Mac or iPhone? Thanks!

MacBook Pro, OS X Yosemite (10.10.3)

Posted on Jun 20, 2016 11:36 AM

Reply

Answer 1

Jun 20, 2016 6:11 PM in response to zinacef

I believe we have a very capable InfoSec department that evaluated all clound based file sharing/transfer services. Box and OneDrive definitely made the cut but iCloud did not. Rather than argue that statement, I'd like to focus on the key question: Is there a way allow access to selective iCloud services and block others? Both on Mac and iPhone

Reply

Answer 2

Jun 21, 2016 8:13 AM in response to zinacef

Thanks for your response zinacef. I believe google driver and dropbox were part of the mix and were deemed safe but regardless, moving back to the actual issue at hand. I saw the following on Apple's site: https://www.apple.com/iphone/business/docs/iOS_Enterprise_Deployment_Overview_EN _Feb14.pdf

· Some services such as Photo Stream, iCloud Keychain, Documents in the Cloud, and Backup can be disabled through the use of restrictions either entered manually on the device or set via configuration profiles

· An MDM solution can also prevent managed apps from being backed up to iCloud.

· This gives users the benefits of using iCloud for personal data while keeping corporate information from being stored in the cloud.

· Data from corporate accounts such as Exchange, or enterprise in-house apps are not backed up to iCloud

Thoughts?

Reply

Answer 3

zinacef

Level 10

88,810 points

Jun 20, 2016 5:13 PM in response to dhingrasachin

dhingrasachin wrote:

"as it not as secure as other cloud services and does not meet our security standards."

What makes you think, or what evidence do you possess, that it is not as secure as other cloud services?

Reply

Answer 4

zinacef

Level 10

88,810 points

Jun 20, 2016 7:24 PM in response to dhingrasachin

Interesting their research didn't include some of the more well known, and noteworthy cloud services, such as Dropbox and Google Drive, but I digress. In answer to your question - no. One cannot choose to be selective with iCloud services and block other parts of the service. It's like a scenario where you're all in or not at all.

Apple built their iCloud services in the hope that folks who purchase their hardware products will stay within the Apple ecosystem simply because everything works harmoniously with everything else within the system.

Can you choose to have Notes saved somewhere else - no, then use Evernote or another third-party application, and the same can be asked for Reminders.

Can you choose to have your iCloud email saved somewhere else - no, then use another third-party application, and the same goes for Calendar, Contacts, and one of the most important apps that folks use around the world - Photos.

You can use third party applications for all the Apple applications as I mentioned above, or you can be half in and half out, if your company so desires, and be platform agnostic.

The choice is yours and your company's!

Reply

Answer 5

zinacef

Level 10

88,810 points

Jun 21, 2016 8:42 AM in response to dhingrasachin

Interesting as I never knew this before.

If that's the case, then in my opinion, I would say it's entirely up to your business on whether to use iCloud and its services for your business needs. Personally, I've read on this forum and others, that iCloud isn't really positioned for use in business but more for individual needs, but then again, that's my opinion.

Whatever you and your company decide, good luck!

Reply

Answer 6

Jun 21, 2016 10:57 AM in response to zinacef

Thanks Zinacef. I'm still not sure if this will fix the issue as I'm hearing it's still all or nothing. Anyone been able to block just the file transfer feature of iCloud without managing my personal devices (iPhone and Macbook) of employees on a guest wifi network. Thanks!

Reply