05-25-2009, 10:15 PM
|
 |
Proprietor
|
|
Join Date: Nov 2008
Posts: 2,237
|
|
KB12281 - Support for placing the BlackBerry Enterprise Server in the DMZ
KB12281 - Support for placing the BlackBerry Enterprise Server in the DMZ
Environment
- BlackBerry® Enterprise Server
Overview
Placing the BlackBerry Enterprise Server in the demilitarized zone (DMZ) is neither recommended nor supported.
The BlackBerry Enterprise Server should not be placed in the DMZ because of the number of connections required to make a Microsoft® Exchange Server call for email messages. Microsoft Exchange varies the available port numbers, making the port numbers inconsistent. It is difficult to configure the firewall for all of the available port numbers. In addition, issues with name resolution might occur when polling the Domain Controller or Global Catalog Server.
As a security practice, installing the BlackBerry Router in the DMZ can be done and is fully supported. This is the only BlackBerry Enterprise Server component that should exist outside of an organization's firewall. For additional information on installing the BlackBerry Router in the DMZ, see Placing the BlackBerry Enterprise Solution in a Segmented Network and Placing the BlackBerry Router in the DMZ.
__________________
http://blog.port3101.org/hdawg/
The views expressed by me on Port3101 and its affiliated sites are my own and do not necessarily reflect the views of my employer.
|
Linear Mode
