I have a BES server (4.1.3) with the GroupWise client installed (currently GW client 6.5.7). Our GroupWise backend and clients are all 7.0.2 and we have the lockout feature enabled to prevent clients older than 7.0.2 from connecting to GroupWise.

We had temporarily disabled this when installing BES and all worked well, but now that the older client lockout is enabled, we can't send or receive email through our Blackberry devices. Do we have to allow the older client to connect in order for BES to work?

I'm guessing the answer is yes but this doesn't sit well with our GroupWise admin. We turned on the lockout feature to force our users to use the newer version of the GW client.

Yes. The GWConnector uses the 6.5.7 GW API so it appears to the PO agent as the 6.5.7 client.

In my opinion, there is really no great reason to lockout 6.5.x clients on a 7.0.x PO. Yes, the 5.5 guys could really screw up the GroupWise views, but there are no dangers I am aware of with 6.5.x. Unless they are worried they have unpatched 6.5.x clients out there that have not been able to access the PO for a long time and they are now magically going to start connecting again...

My opinion, allow 6.5.7 clients as the minimum client version and monitor the PO logs for any other IP addresses (other than the BES servers) that access with that client version.

Jeff