Welcome to Port3101.org : Your BES Connection Mark forums read | View Forum Leaders
Port3101.org : Your BES Connection



Reply
LinkBack Thread Tools Display Modes
Block BIS traffic without affecting BES?
 
  #1 (permalink)  
Old 01-13-2011, 01:39 PM
BES Administrator
 
Join Date: Feb 2009
Location: IL
Posts: 12
Default Block BIS traffic without affecting BES?

Can I block the ports for BIS listed here to prevent OWA access on Blackberry phones and force users to connect through our BES without interrupting BES traffic?

KB11036-Firewall and connection requirements for the BlackBerry Internet Service
Reply With Quote
Sponsored Links
  #2 (permalink)  
Old 01-13-2011, 04:15 PM
BES Administrator
 
Join Date: Jun 2010
Location: In the woods
Posts: 28
Default

Quote:
Originally Posted by kehanra99 View Post
Can I block the ports for BIS listed here to prevent OWA access on Blackberry phones and force users to connect through our BES without interrupting BES traffic?

KB11036-Firewall and connection requirements for the BlackBerry Internet Service
That would be a yes you can, it's actually the easiest way of doing it.
Reply With Quote
  #3 (permalink)  
Old 01-14-2011, 03:03 PM
knottyrope's Avatar
The knotty A D M I N
 
Join Date: Jan 2009
Location: Mass
Posts: 103
Default

block inbound 443 and/or 80 (depending on your setup) from all those IPs listed on your firewall and none of your BlackBerry users can get OWA anymore.

Also block IMAP and POP3 if you are using them.
__________________
------------------------------------------------------

Torch 9800 on BES 4.1.6 MR7, Exchange 2003, SQL 2005.
WES 2009-2010 Survivor
Reply With Quote
  #4 (permalink)  
Old 01-16-2011, 02:00 PM
BES Expert
 
Join Date: Mar 2009
Posts: 106
Default

Or block OWA from direct Internet access..... which is the better/safer practice.
Reply With Quote
  #5 (permalink)  
Old 01-17-2011, 11:31 AM
BES Administrator
 
Join Date: Feb 2009
Location: IL
Posts: 12
Default

Quote:
Originally Posted by hooper View Post
Or block OWA from direct Internet access..... which is the better/safer practice.
We can't block OWA from internet access because it's used by many employees after work hours. The main worry is unauthorized devices. While it won't block anything that isn't a Blackberry, it will take care of the biggest offender in this case.
Reply With Quote
  #6 (permalink)  
Old 01-17-2011, 11:37 AM
BES Expert
 
Join Date: Mar 2009
Posts: 106
Default

Quote:
Originally Posted by kehanra99 View Post
We can't block OWA from internet access because it's used by many employees after work hours. The main worry is unauthorized devices. While it won't block anything that isn't a Blackberry, it will take care of the biggest offender in this case.
This is why we have VPN's Just about all the companies I have worked with have disabled OWA outside of their LAN for security reasons.

In this case it kills several birds with one stone. It will block ALL rogue devices using active sync that may not support security policies needed by an organization.
Reply With Quote
Reply

Bookmarks

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On


Similar Threads
Thread Thread Starter Forum Replies Last Post
WiFi BES traffic clarification Pinjo Port 3101: The BES Admin Bar & Grill 6 01-12-2010 04:50 PM
routing BB traffic through BES saqib Port 3101: The BES Admin Bar & Grill 1 10-14-2009 07:41 PM
KB16378 - How to allow enterprise activation traffic for a BES behind a firewall hdawg Featured BlackBerry KB Articles 1 08-22-2009 02:29 PM


All times are GMT -4. The time now is 04:52 PM.
Powered by vBulletin® Version 3.8.9
Copyright ©2000 - 2018, vBulletin Solutions, Inc.


 

SEO by vBSEO 3.3.2 PL2