BlackBerry Forums Support Community
              

Closed Thread
 
Thread Tools
Old 11-27-2008, 12:23 PM   #1
Bryan Peas
New Member
 
Join Date: Nov 2008
Model: 9000
PIN: N/A
Carrier: Cable & Wireless
Posts: 2
Default BES Router in DMZ configuration

Please Login to Remove!

I currently have a BES V4.1.6 installed on my internal network with all the components sitting on one server. After reading further into the RIM documentation i realized that placing the router in a DMZ was far more secure.

i intend to install the router between two firewalls.

Currently port 3101 is opened for SRP outbound and BB service connection Inbound, what changes of ports are required to allow the BB router to communicate with the BES. Take into account i want to change the port number between the router and BES.

Thanks .....Bryan
Offline  
Old 11-27-2008, 12:27 PM   #2
Jadey
BBF War Game Mod
 
Jadey's Avatar
 
Join Date: Oct 2006
Location: Denver CO
Model: Z10
OS: 10010614
PIN: SEEKRIT innit
Carrier: AT&T
Posts: 4,294
Default

Moved to BES Admin Corner, better chance of replies there...
__________________
Jadey : Infrastructure Architect, Denver CO
Offline  
Old 11-27-2008, 01:18 PM   #3
Bryan Peas
New Member
 
Join Date: Nov 2008
Model: 9000
PIN: N/A
Carrier: Cable & Wireless
Posts: 2
Default

Thanks Jadey.
Offline  
Old 11-27-2008, 02:29 PM   #4
CanuckBB
BlackBerry Extraordinaire
 
CanuckBB's Avatar
 
Join Date: Feb 2006
Location: YYZ
Model: 9900
Carrier: Rogers
Posts: 1,183
Default

Quote:
Originally Posted by Bryan Peas View Post
Currently port 3101 is opened for SRP outbound and BB service connection Inbound, what changes of ports are required to allow the BB router to communicate with the BES. Take into account i want to change the port number between the router and BES.

Thanks .....Bryan
What is that BB service connection that you speak of????

All you need for BES is 3101 outbound. BES initiates contact, only and always.
Never did figure out how the router in the DMZ made it more secure.

Actually, I never did figure how the whole DMZ was more secure unless the server in the DMZ ahs no NIC pointing towards the inside firewall. I figured that if the hacker was good enough to breach the first firewall, he'll propably be good enough to breach the second one...
Offline  
Old 11-27-2008, 02:44 PM   #5
x14
BlackBerry Extraordinaire
 
Join Date: Jul 2005
Location: NYC
Model: 9800
OS: 6.0.0.546
Carrier: AT&T
Posts: 2,344
Default

Quote:
Originally Posted by CanuckBB View Post
Actually, I never did figure how the whole DMZ was more secure unless the server in the DMZ ahs no NIC pointing towards the inside firewall. I figured that if the hacker was good enough to breach the first firewall, he'll propably be good enough to breach the second one...
It's not penetrating the firewall it's hacking the BlackBerry Router component.

The idea is if the BlackBerry Router was on the LAN and someone hacks it they would have access to the resources on the LAN.

If the BlackBerry Router was in a DMZ and someone hacks it they have access to nothing.
__________________
Exchange 2007/BES 5.0.2 MR2
Offline  
Closed Thread



Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump


NEW Sick Photoelectric Switch Sensor WTV4-3P2241  picture

NEW Sick Photoelectric Switch Sensor WTV4-3P2241

$210.00



NEW ALLEN BRADLEY 806-D42 DRUM SWITCH REVERSING 4POLE STOCK 5480 picture

NEW ALLEN BRADLEY 806-D42 DRUM SWITCH REVERSING 4POLE STOCK 5480

$340.00



NEW ALLEN BRADLEY 806-D42 DRUM SWITCH REVERSING 4POLE STOCK 5474 picture

NEW ALLEN BRADLEY 806-D42 DRUM SWITCH REVERSING 4POLE STOCK 5474

$340.00



emergency power transfer switch non fused generator manual ge 100 amp 240 volt picture

emergency power transfer switch non fused generator manual ge 100 amp 240 volt

$206.89



WPS30V 60V 120V 160V 2A 3A 5A 10A Lab Adjustable DC Power Supply Variable Switch picture

WPS30V 60V 120V 160V 2A 3A 5A 10A Lab Adjustable DC Power Supply Variable Switch

$110.19



GEYA ATS PC Dual Power Automatic Power 3Pole 100A 220V Transfer Switch Grid NEW picture

GEYA ATS PC Dual Power Automatic Power 3Pole 100A 220V Transfer Switch Grid NEW

$44.20







Copyright © 2004-2016 BlackBerryForums.com.
The names RIM © and BlackBerry © are registered Trademarks of BlackBerry Inc.