Welcome to Port3101.org : Your BES Connection Mark forums read | View Forum Leaders
Port3101.org : Your BES Connection



Reply
LinkBack Thread Tools Display Modes
BlackBerry 6 Browser can bypass MDS-CS
 
  #1 (permalink)  
Old 11-04-2010, 11:29 PM
BES Administrator
 
Join Date: Feb 2009
Location: I come from a land down under where beer does flow and men chunder
Posts: 42
Default BlackBerry 6 Browser can bypass MDS-CS

Hi All,

I'm evaluating a BlackBerry 9800 at the moment & realised that I was no longer being prompted to to enter my proxy authentication details when using the BlackBerry Browser. Upon investigation I found out that you can no longer set the Default Browser transport method under the Browser Options e.g. BlackBerry Browser, Internet Browser, Hotspot Browser etc.

A quick search of the Technical Solution Centre revealed the following:

Article ID: KB23699
Simplified browser selection in BlackBerry Device Software 6.0

Overview

BlackBerry Device Software 6.0 introduces several features to the BlackBerry® smartphone, one of which is the simplified browser selection. Previously, a BlackBerry smartphone user made a selection from the Internet browser, BlackBerry® Browser, Hotspot browser, or WAP browser. With BlackBerry Device Software 6.0, the user is no longer required to make a browser selection, as the browser is now automatically selected.

The BlackBerry Browser continues to leverage multiple transport options, such as BlackBerry® Internet Service, BlackBerry® Enterprise Server, BlackBerry® Mobile Data System, and Wi-Fi® technology; however, the user is no longer required to manually change and configure these settings. The browser automatically leverages the optimal transport available at any given time, to ensure optimal performance and minimal impact to the cellular network. Additionally, the manual controls to change settings have been removed from the browser options screen to simplify the user experience.

The priority is as follows:

* Browser transport that the application programming interface (API) specifies

* Browser transport that the BlackBerry MDS Browser Domains Wi-Fi Internet Access Path IT policy rule specifies

* Browser transport that uses the BlackBerry Enterprise Server if the domain name does not include a period (.) or it is a private IP address

* Direct Wi-Fi transport

* Wi-Fi transport that uses the BlackBerry Enterprise Server

* Browser transport that uses a USB connection to a computer

* Wireless network transport that uses the BlackBerry Internet Service

* Wireless network transport that uses the BlackBerry Enterprise Server

* Browser transports based on the order in the browser configuration records

NOTE: For for information about the Wi-Fi Internet Access Path IT policy, see KB23701. For information on how to import this and other IT policies for BlackBerry Device Software 6.0, see KB23515.

NOTE: For more information about how the browser is automatically selected, see - BlackBerry Browser - Technical Note.

Environment

* BlackBerry® Device Software 6.0

It seems unless you restrict all other Browsers via IT Policy, the Browser will most likely bypass the MDS-CS & you will not be able to log/filter Internet traffic from devices running device software 6.
Reply With Quote
Sponsored Links
  #2 (permalink)  
Old 11-07-2010, 10:51 PM
BES Administrator
 
Join Date: Aug 2009
Location: Austin, Texas
Posts: 22
Default

Ran into this as well. It also means, for us, that no one can access an internal website anymore. Not really sure what RIM was thinking on this one.
Reply With Quote
  #3 (permalink)  
Old 11-08-2010, 10:46 AM
knottyrope's Avatar
The knotty A D M I N
 
Join Date: Jan 2009
Location: Mass
Posts: 103
Default

I did nothing on BES 4.1.6 and able to access internal sites.

What are you using for a URL?
__________________
------------------------------------------------------

Torch 9800 on BES 4.1.6 MR7, Exchange 2003, SQL 2005.
WES 2009-2010 Survivor
Reply With Quote
  #4 (permalink)  
Old 11-10-2010, 02:24 AM
BES Administrator
 
Join Date: Feb 2009
Location: I come from a land down under where beer does flow and men chunder
Posts: 42
Default

Quote:
Originally Posted by lhorns99 View Post
Ran into this as well. It also means, for us, that no one can access an internal website anymore. Not really sure what RIM was thinking on this one.
Depending on how your proxy servers are configured you may need to edit your MDS-CS properties to add proxy exclusions. You can do this by clicking on your MDS-CS instance in the Explorer view (if running BES 4.1.x) > click Edit Properties > click Proxy > click on the button with the 3 dots next to Proxy Mappings > click New > add the URL wildcard for your internal web servers e.g. http://10.*.*.* > set the Proxy String to "DIRECT" (to bypass proxy server) > Save > Restart the MDS-CS service.

Note, if you already have some Proxy Mappings make sure you put your internal servers at the top of the list.
Reply With Quote
  #5 (permalink)  
Old 11-10-2010, 01:03 PM
BES Expert
 
Join Date: Mar 2009
Posts: 106
Default

With the new policies, you can still force all BB6 browser connections through MDS.

Access through BlackBerry MDS Connection Service --> Yes
the device must access the Internet through the BlackBerry MDS Connection Service.

Do you think RIM wouldn't include this?
Reply With Quote
  #6 (permalink)  
Old 12-23-2010, 04:50 AM
BES Activated
 
Join Date: Dec 2010
Location: Johannesburg
Posts: 8
Default

Are these new policies available on Bes Express? I can find the new policies that will allow me to force my BB6 devices through MDS, but cant figure out how to import them into express.
Reply With Quote
  #7 (permalink)  
Old 12-29-2010, 08:51 PM
BES Activated
 
Join Date: Dec 2010
Posts: 1
Default

Quote:
Originally Posted by hooper View Post
With the new policies, you can still force all BB6 browser connections through MDS.

Access through BlackBerry MDS Connection Service --> Yes
the device must access the Internet through the BlackBerry MDS Connection Service.

Do you think RIM wouldn't include this?
will this apply to wifi browsing as well? meaning, if a user turns off mobile network in manage connections and only has wifi turned on, then the browser connection still goes through MDS?

thanks
Reply With Quote
  #8 (permalink)  
Old 12-30-2010, 12:00 AM
BES Expert
 
Join Date: Mar 2009
Posts: 106
Default

Quote:
Originally Posted by bestester View Post
will this apply to wifi browsing as well? meaning, if a user turns off mobile network in manage connections and only has wifi turned on, then the browser connection still goes through MDS?

thanks
For the browser, yes.
Reply With Quote
Reply

Bookmarks

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On


Similar Threads
Thread Thread Starter Forum Replies Last Post
BES 5 & Serial bypass wi-fi activations Zippygit Port 3101: The BES Admin Bar & Grill 1 06-07-2010 08:33 AM
KB19552 Vulnerability in BlackBerry Browser ObliteRon Port 3101: The BES Admin Bar & Grill 2 10-07-2009 08:58 AM
KB10936 - How to disable Internet Browser on BlackBerry devices hdawg Featured BlackBerry KB Articles 0 08-30-2009 11:37 AM
KB16463 - How to change the default browser on a BlackBerry smartphone hdawg Featured BlackBerry KB Articles 0 04-16-2009 11:59 AM
KB14913 - Unable to browse web using BlackBerry Browser when BES is on Windows SBS Si Featured BlackBerry KB Articles 0 03-09-2009 11:08 AM


All times are GMT -4. The time now is 12:40 PM.
Powered by vBulletin® Version 3.8.9
Copyright ©2000 - 2018, vBulletin Solutions, Inc.


 

SEO by vBSEO 3.3.2 PL2