Hello,
Port 3101 is open from the BES Router (in DMZ) to RIM
Port 3101 is open from the BES servers to the BES router (in DMZ)

Should port 3101 be open from the BES router (in DMZ) to the BES servers internally as well??
Cannot see a document confirming this.

Thanks

Can't find it documented anywhere, but I'm pretty sure that you do *not* need to enable incoming traffic to your LAN from the DMZ if I recall our company's FW configuration.

Only the LAN BES server initiates outgoing traffic towards the BB router in the DMZ as its next "hop". The BB router in DMZ does not need to initiate any traffic from the Internet to the BES in LAN.

No, port 3101 does not need to be open from DMZ to Internal network. The router does not initiate any connections inbound.

READ: KB12281 - Support for placing the BlackBerry Enterprise Server in the DMZ

__________________
http://blog.port3101.org/hdawg/

The views expressed by me on Port3101 and its affiliated sites are my own and do not necessarily reflect the views of my employer.

thank you

thanks for the info and the link hdawg, just what i needed for our upcoming migration.