Administration Guide

Local Navigation

Configuring certain BlackBerry Enterprise Server components to use proxy servers

You can configure the BlackBerry® MDS Connection Service, BlackBerry MDS Integration Service, and BlackBerry Collaboration Service to use proxy servers to access web addresses on the Internet and your organization's intranet. You should use a proxy method that is consistent with the proxy method that other applications and servers in your organization use to access web content.

Proxy servers typically do not permit network traffic between servers that are on the same side of the firewall, so you can configure certain BlackBerry® Enterprise Server components to use a .pac file, or to access the Internet directly through a proxy server. You can also configure multiple proxy servers to manage traffic to specific web addresses, and you can specify URLs that the BlackBerry Enterprise Server components can access without using a proxy server.

The BlackBerry MDS Integration Service sends application updates and data to BlackBerry devices through the BlackBerry MDS Connection Service. The BlackBerry MDS Integration Service can only accept and respond to messages that it receives from a direct connection with the BlackBerry MDS Connection Service. If you configured the BlackBerry MDS Connection Service to use a proxy server, you must configure proxy rules to permit a direct connection between the BlackBerry MDS Connection Service and the BlackBerry MDS Integration Service. You cannot use a proxy server to exchange data between these components. If you use a .pac file configuration, you can change the .pac file to permit a direct connection between the BlackBerry MDS Connection Service and BlackBerry MDS Integration Service.

Configure a BlackBerry Enterprise Server component to use a .pac file

You can configure the BlackBerry® MDS Connection Service, BlackBerry MDS Integration Service, or BlackBerry Collaboration Service to use a .pac file. The BlackBerry® Enterprise Server components support only one .pac file.

  1. In the BlackBerry Administration Service, in the Servers and components menu, expand BlackBerry Solution topology > BlackBerry Domain > Component view.
  2. Expand the appropriate BlackBerry Enterprise Server component.
  3. Click the instance that you want to change.
  4. Click Edit instance.
  5. On the Proxy mappings tab, in the Universal resource locator field, type the regular expression for the web address that you want the proxy mapping rule to control.
  6. In the Proxy type drop-down list, perform one of the following actions:
    • To detect a .pac file automatically, click AUTO.
    • To specify the location of the .pac file, click PAC. In the Proxy string field, type the proxy server name, port number, and location of the .pac file using the following format: <proxy_server>:<port>/<pac_filepath>/<pac_filename>.
  7. Click the Add icon for the proxy item. If you add more than one proxy item, use the Up and Down icons to set the priority of the proxy items.
  8. Click the Add icon for the web address. If you add more than one web address, use the Up and Down icons to set the priority of the web addresses.
  9. Click Save all.

Configure a BlackBerry Enterprise Server component to use a proxy server

You can configure the BlackBerry® MDS Connection Service, BlackBerry MDS Integration Service, or BlackBerry Collaboration Service to access web servers through a proxy server.

You can specify more than one proxy string in a proxy mapping rule for a web address. If the BlackBerry® Enterprise Server component cannot access the web server using the first proxy string, it tries to access the web server using the subsequent proxy strings that you specify, until the component accesses the web server.

If the BlackBerry MDS Connection Service is configured to use a proxy server, BlackBerry device users can browse web sites that use HTTPS if the proxy server supports basic authentication only.

  1. In the BlackBerry Administration Service, in the Servers and components menu, expand BlackBerry Solution topology > BlackBerry Domain > Component view.
  2. Expand the appropriate BlackBerry Enterprise Server component.
  3. Click the instance that you want to change.
  4. Click Edit instance.
  5. On the Proxy mappings tab, in the Universal resource locator field, type the URL regular expression for the web address that you want the proxy mapping rule to control.
  6. In the Proxy type drop-down list, perform one of the following actions:
    • To configure a proxy server, click PROXY. In the Proxy string field, type the proxy server name and port number using the following format: <proxy_server>:<port>.
    • To exclude the web address from routing through the proxy server, click DIRECT.
  7. Click the Add icon for the proxy item. If you add more than one proxy item, use the Up and Down icons to set the priority for the proxy items.
  8. Click the Add icon for the web address. If you add more than one web address, use the Up and Down icons to set the priority for the web addresses.
  9. Click Save all.

Configure a BlackBerry Enterprise Server component to authenticate to a proxy server on behalf of BlackBerry devices

You can configure the BlackBerry® MDS Connection Service , BlackBerry MDS Integration Service, or BlackBerry Collaboration Service to authenticate to a proxy server on behalf of BlackBerry devices.

Before you begin: If you want to configure the BlackBerry MDS Connection Service to authenticate to a proxy server on behalf of BlackBerry devices, turn on authentication support for the BlackBerry MDS Connection Service.
  1. In the BlackBerry Administration Service, in the Servers and components menu, expand BlackBerry Solution topology > BlackBerry Domain > Component view.
  2. Expand the appropriate BlackBerry® Enterprise Server component.
  3. Click the instance that you want to change.
  4. Click Edit instance.
  5. On the Proxy mappings tab, click the Edit button for a web address.
  6. In the Credentials section, in the User name field, type the user name that the BlackBerry Enterprise Server component can use to connect to the proxy server that is defined for the web address.
  7. In the Password and Confirm password fields, type the password for the user name.
  8. Click the Add icon.
  9. Click Save all.

Was this information helpful? Send us your comments.