Blackberry device access via restricted Wifi
 

Hi,

Using a BES policy we have configured our Blackberry's to attach to a ring fenced network via Wifi. This network only has visibility of the internet and not the internal corporate network and is restricted to using ports 80/443. So web browsing from the BB is fine but message delivery and other services still come in via our mobile network provider.

I've manage to convince our network team to open up more ports to increase the usability of the devices but I am struggling to find a comprehensive list anywhere. Is it just TCP 3101 or are there more needed?

Thanks in advance.

The BES server must be allowed to have ougoing connections to Port 3101 and the related incoming data. I guess, the server ist not connected using WiFi ?

If the Handhelds have internet, it should be enough to allow them to have outgoing connections to https port 443 (as you already have). Then Email should work using Wifi.
Go into the wifi options, WiFi Diagnostics. There you can see if the connection is successful. Or, watch the WiFi symbol in the upper right of the Screen: If it is dimmend, there is no connection to the Network, if it is highlighted, the connection is there.

Or, if unsure, deactive the mobile network, and use only WiFi, then check if you still can send and receive Email.

It is possible, that your system blocks some ports which the Device uses to determine if a internet connection to RIMs Datacenter is possible, but, If you have internet-Access over WiFi that should normally be enough.

Thanks for the info, here my diags:

Wi-Fi
Current Profile: Secured
SSID: xxxxxx
AP MAC Address: 00:00:yx:yy:yx:32
Security Type: Pre-Shared Key (PSK)
Local IP Address: 192.xxx.xxx.xxx
Signal Level: -50 dBm
Connection Data Rate: 54 Mbps
Status: Network acquired

VPN
Current Profile:
Concentrator Address:
Contact: N/A
Authentication: N/A
Secure Device IP:
Status: VPN profile is not found.

Enterprise
UIDs:
Connecting: Error
Authenticating router: N/A
Authenticating server: N/A

BlackBerry Infrastructure
Connecting: Successful
Authenticating router: Successful
Authenticating server: Successful

I guess that looks ok, I wonder why we can't receive email on the connection?

Do they have a data plan?

If you go in your Blackberries settings,
advanced settings,
HRT-Table.
Is there a profile "WiFi", and, does it point to some host at RIM ?