Originally Posted by x14
You need to open port 3101 outbound only to srp.na.blackberry.net
I'd recommend *highly* against srp.na.blackberry.net. I realize it used to be the de-facto standard, but its not anymore. If you are in the US, use srp.us.blackberry.net. RIM recently moved to a "high availability" infrastructure, and if there were an emergency, you would want your BES to be able to hit the right DNS entry and get your BES connected again... the NA doesnt cut it anymore.