Help Center
Local Navigation
- IT policy rules
-
- Application Center policy group
- BlackBerry Messenger policy group
- BlackBerry Smart Card Reader policy group
- Disable Auto Reconnect To BlackBerry Smart Card Reader IT policy rule
- Force Erase All Keys on BlackBerry Disconnected Timeout IT policy rule
- Force Erase Key on PC Standby IT policy rule
- Maximum BlackBerry Bluetooth Traffic Inactivity Timeout IT policy rule
- Maximum BlackBerry Disconnected Timeout IT policy rule
- Maximum BlackBerry Long Term Timeout IT policy rule
- Maximum Bluetooth Encryption Key Regeneration Period IT policy rule
- Maximum Bluetooth Range IT policy rule
- Maximum Connection Heartbeat Period IT policy rule
- Maximum Number of BlackBerry Transactions IT policy rule
- Maximum Number of PC Pairings IT policy rule
- Maximum Number of PC Transactions IT policy rule
- Maximum PC Bluetooth Traffic Inactivity Timeout IT policy rule
- Maximum PC Disconnected Timeout IT policy rule
- Maximum PC Long Term Timeout IT policy rule
- Maximum Smart Card Not Present Timeout IT policy rule
- Minimum PIN Entry Mode IT policy rule
- BlackBerry Unite! policy group
- Bluetooth policy group
- Allow Outgoing Calls IT policy rule
- Disable Address Book Transfer IT policy rule
- Disable Advanced Audio Distribution Profile IT policy rule
- Disable Audio/Video Remote Control Profile IT policy rule
- Disable Bluetooth IT policy rule
- Disable Desktop Connectivity IT policy rule
- Disable Dial-Up Networking IT policy rule
- Disable Discoverable Mode IT policy rule
- Disable File Transfer IT policy rule
- Disable Handsfree Profile IT policy rule
- Disable Headset Profile IT policy rule
- Disable Pairing IT policy rule
- Disable Serial Port Profile IT policy rule
- Disable SIM Access Profile IT policy rule
- Disable Wireless Bypass IT policy rule
- Force CHAP Authentication on Bluetooth Link IT policy rule
- Limit Discoverable Time IT policy rule
- Minimum Encryption Key Length IT policy rule
- Require Encryption IT policy rule
- Require LED Connection Indicator IT policy rule
- Require Password for Discoverable Mode IT policy rule
- Require Password for Enabling Bluetooth Support IT policy rule
- Browser policy group
- Allow Application Download Services IT policy rule
- Allow Hotspot Browser IT policy rule
- Allow IBS Browser IT policy rule
- Disable Auto Synchronization in Browser IT policy rule
- Disable JavaScript in Browser IT policy rule
- Download Images URL IT policy rule
- Download Themes URL IT policy rule
- Download Tunes URL IT policy rule
- MDS Browser BSM Enabled IT policy rule
- MDS Browser Domains IT policy rule
- MDS Browser HTML Tables Enabled IT policy rule
- MDS Browser JavaScript Enabled IT policy rule
- MDS Browser Style Sheets Enabled IT policy rule
- MDS Browser Title IT policy rule
- MDS Browser Use Separate Icon IT policy rule
- Camera policy group
- Certification Authority Profile policy group
- Allow Private Key Export IT policy rule
- Certification Authority Host IT policy rule
- Certificate Authority Port IT policy rule
- Certification Authority Profile Name IT policy rule
- Certification Authority Profile Required IT policy rule
- Certification Authority Type IT policy rule
- Certificate Enrollment Delay IT policy rule
- Certificate Expiry Window IT policy rule
- Common Name Components IT policy rule
- Custom Microsoft Certification Authority Certificate Template IT policy rule
- Distinguished Name Components IT policy rule
- Key Algorithm IT policy rule
- Key Length IT policy rule
- Microsoft Certification Authority Certificate Template IT policy rule
- RSA Certification Authority Certificate ID IT policy rule
- RSA Jurisdiction ID IT policy rule
- Certificate Synchronization policy group
- Common policy group
- BlackBerry Server version IT policy rule
- Confirm On Send IT policy rule
- Disable Kodiak PTT IT policy rule
- Disable MMS IT policy rule
- Disable Voice-Activated Dialing IT policy rule
- Disable Voice Note Recording IT policy rule
- Enable Simultaneous Phone and Data IT policy rule
- IT Policy Notification IT policy rule
- Lock Owner Info IT policy rule
- Set Owner Info IT policy rule
- Set Owner Name IT policy rule
- Desktop Only items
- Auto Backup Enabled IT policy rule
- Auto Backup Exclude Messages IT policy rule
- Auto Backup Exclude Synchronization IT policy rule
- Auto Backup Frequency IT policy rule
- Auto Backup Include All IT policy rule
- Disable Wireless Calendar IT policy rule
- Do Not Save Sent Messages IT policy rule
- Force Load Count IT policy rule
- Force Load Message IT policy rule
- Forward Messages In Cradle IT policy rule
- Message Conflict Mailbox Wins IT policy rule
- Message Prompt IT policy rule
- Show Application Loader IT policy rule
- Show Web Link IT policy rule
- Synchronize Messages Instead Of Importing IT policy rule
- Web Link Label IT policy rule
- Web Link URL IT policy rule
- Desktop policy group
- Allow External Device Software Servers IT policy rule
- Allow Personal Folder Reconciliation IT policy rule
- Desktop Allow Desktop Add-ins IT policy rule
- Desktop Allow Device Switch IT policy rule
- Desktop Password Cache Timeout IT policy rule
- Disable Check For Updates Link IT policy rule
- Disable Media Manager IT policy rule
- Override Check For Updates URL IT policy rule
- Device IOT Application policy group
- Device Only Items
- Allow BCC Recipients IT policy rule
- Allow Peer-to-Peer Messages IT policy rule
- Allow SMS IT policy rule
- Default Browser Config UID IT policy rule
- Enable Long-Term Timeout IT policy rule
- Enable WAP Config IT policy rule
- Home Page Address IT policy rule
- Home Page Address Is Read-Only IT policy rule
- Maximum Password Age IT policy rule
- Maximum Security Timeout IT policy rule
- Minimum Password Length IT policy rule
- Password Pattern Checks IT policy rule
- Password Required IT policy rule
- User Can Change Timeout IT policy rule
- User Can Disable Password IT policy rule
- Documents To Go policy group
- Email Messaging policy group
- Allow Auto Attachment Download IT policy rule
- Attachment Viewing IT policy rule
- Confirm External Image Download IT policy rule
- Disable Form Submission IT policy rule
- Disable Manual Download of External Images IT policy rule
- Disable Notes Native Encryption Forward And Reply IT policy rule
- Disable Rich Content Email IT policy rule
- Enable Wireless Message Reconciliation IT policy rule
- Inline Content Requests IT policy rule
- Keep Message Duration IT policy rule
- Keep Saved Message Duration IT policy rule
- Maximum Native Attachment MFH attachment size IT policy rule
- Maximum Native Attachment MFH total attachment size IT policy rule
- Maximum Native Attachment MTH attachment size IT policy rule
- Notes Native Encryption Password Timeout IT policy rule
- Prepend Disclaimer IT policy rule
- Require Notes Native Encryption For Outgoing Messages IT policy rule
- Enterprise Voice Client policy group
- Descriptions of IT policy rules
- Firewall policy group
- Global items
- Instant Messaging policy group
- Location Based Services policy group
- MDS Integration Service policy group
- Allow Access to Multiple Domains IT policy rule
- Allow Discovery By User IT policy rule
- Disable Activation With Public BlackBerry MDS Integration Service IT policy rule
- Disable MDS Runtime IT policy rule
- Disable User-Initiated Activation With Public BlackBerry MDS Integration Service IT policy rule
- Enable Access to Device Data for MDS Runtime 4.3.0 and earlier IT policy rule
- Lowest BlackBerry MDS Integration Service Security Version Allowed IT policy rule
- Queue Limit for Inbound Application Messages IT policy rule
- Queue Limit for Outbound Application Messages IT policy rule
- Verify BlackBerry MDS Integration Service Certificate IT policy rule
- Memory Cleaner policy group
- On-Device Help policy group
- Password policy group
- PIM Synchronization policy group
- Disable Address Wireless Synchronization IT policy rule
- Disable All Wireless Synchronization IT policy rule
- Disable Calendar Wireless Synchronization IT policy rule
- Disable Enterprise Activation Progress IT policy rule
- Disable Memopad Wireless Sync IT policy rule
- Disable Phone Call Log Wireless Synchronization IT policy rule
- Disable PIN Messages Wireless Synchronization IT policy rule
- Disable SMS Messages Wireless Sync IT policy rule
- Disable Task Wireless Sync IT policy rule
- Disable Wireless Bulk Loads IT policy rule
- PGP Application policy group
- PGP Allowed Content Ciphers IT policy rule
- PGP Allowed Encrypted Attachment Mode
- PGP Allowed Encryption Types IT policy rule
- PGP Blind Copy Address IT policy rule
- PGP Force Digital Signature IT policy rule
- PGP Force Encrypted Messages IT policy rule
- PGP Minimum Strong DH Key Length IT policy rule
- PGP Minimum Strong DSA Key Length IT policy rule
- PGP Minimum Strong RSA Key Length IT policy rule
- PGP Universal Enrollment Method IT policy rule
- PGP Universal Policy Cache Timeout IT policy rule
- PGP Universal Server Address IT policy rule
- RIM Value-Added Applications policy group
- Disable BlackBerry Wallet IT policy rule
- Disable Ecommerce Content Optimization Engine IT policy rule
- Disable Lotus Connections IT policy rule
- Disable Organizer Data Access for Social Networking Applications
- Disable RIM Value-Added Applications IT policy rule
- Lotus Connections Activities Server IT policy rule
- Lotus Connections Blogs Server IT policy rule
- Lotus Connections Communities Server IT policy rule
- Lotus Connections Dogear Server IT policy rule
- Lotus Connections Profiles Server IT policy rule
- S/MIME Application policy group
- Entrust Messaging Server (EMS) Email Address IT policy rule
- S/MIME Allowed Content Ciphers IT policy rule
- S/MIME Allowed Encrypted Attachment Mode IT policy rule
- S/MIME Allowed Encryption Types IT policy rule
- S/MIME Blind Copy Address IT policy rule
- S/MIME Force Digital Signature IT policy rule
- S/MIME Force Encrypted Messages IT policy rule
- S/MIME Force Smartcard Use IT policy rule
- S/MIME Minimum Strong DH Key Length IT policy rule
- S/MIME Minimum Strong DSA Key Length IT policy rule
- S/MIME Minimum Strong ECC Key Length IT policy rule
- S/MIME Minimum Strong RSA Key Length IT policy rule
- Secure Email policy group
- Security policy group
- Allowed Authentication Mechanisms IT policy rule
- Allow External Connections IT policy rule
- Allow Internal Connections IT policy rule
- Allow Outgoing Call When Locked IT policy rule
- Allow Resetting of Idle Timer IT policy rule
- Allow Screen Shot Capture IT policy rule
- Allow Smart Card Password Caching IT policy rule
- Allow Split-Pipe Connections IT policy rule
- Allow Third Party Apps to Use Persistent Store IT policy rule
- Allow Third Party Apps to Use Serial Port IT policy rule
- Certificate Status Maximum Expiry Time IT policy rule
- Content Protection of Contact List IT policy rule
- Content Protection Strength IT policy rule
- Desktop Backup IT policy rule
- Disable 3DES Transport Crypto IT policy rule
- Disable BlackBerry App World IT policy rule
- Disable Cut/Copy/Paste IT policy rule
- Disable External Memory IT policy rule
- Disable Forwarding Between Services IT policy rule
- Disable Geo-Tagging of Photos IT policy rule
- Disable GPS IT policy rule
- Disable Invalid Certificate Use IT policy rule
- Disable IP Modem IT policy rule
- Disable Key Store Backup IT policy rule
- Disable Key Store Low Security IT policy rule
- Disable Media Manager FTP Access
- Disable Message Normal Send IT policy rule
- Disable Peer-to-Peer Normal Send IT policy rule
- Disable Persisted Plain Text IT policy rule
- Disable Public Photo Sharing Applications IT policy rule
- Disable Public Social Networking Applications IT policy rule
- Disable Radio When Cradled IT policy rule
- Disable Revoked Certificate Use IT policy rule
- Disable Smart Password Entry IT policy rule
- Disable Stale Certificate Status Checks IT policy rule
- Disable Stale Status Use IT policy rule
- Disable Untrusted Certificate Use IT policy rule
- Disable Unverified Certificate Use IT policy rule
- Disable Unverified CRLs IT policy rule
- Disable USB Mass Storage IT policy rule
- Disable Weak Certificate Use IT policy rule
- Disallow Third Party Application Downloads IT policy rule
- External File System Encryption Level IT policy rule
- FIPS Level IT policy rule
- Firewall Block Incoming Messages IT policy rule
- Firewall Whitelist Addresses IT policy rule
- Force Content Protection Of Master Keys IT policy rule
- Force Device Password Entry While User Authentication is Enabled IT policy rule
- Force LED Blinking When Microphone Is On IT policy rule
- Force Lock When Closed IT policy rule
- Force Lock When Holstered IT policy rule
- Force Multi Factor Authentication IT policy rule
- Force Smart Card Reader Challenge Response while User Authentication is enabled IT policy rule
- Force Smart Card Two Factor Authentication IT policy rule
- Force Smart Card Two Factor Challenge Response IT policy rule
- Key Store Password Maximum Timeout IT policy rule
- Lock on Smart Card Removal IT policy rule
- Maximum Smart Card User Authenticator Certificate Status Check Period IT policy rule
- Message Classification IT policy rule
- Message Classification Title IT policy rule
- Minimal Encryption Key Store Security Level IT policy rule
- Minimal Signing Key Store Security Level IT policy rule
- Password Required for Application Download IT policy rule
- Reset to Factory Defaults on Wipe IT policy rule
- Require Secure APB Messages IT policy rule
- Required Password Pattern IT policy rule
- Secure Wipe Delay After IT Policy Received IT policy rule
- Secure Wipe Delay After Lock IT policy rule
- Secure Wipe if Low Battery IT policy rule
- Security Service Colors IT policy rule
- Security Transcoder Cod File Hashes IT policy rule
- Trusted Certificate Thumbprints IT policy rule
- Weak Digest Algorithms IT policy rule
- Service Exclusivity policy group
- Allow Other Browser Services IT policy rule
- Allow Other Calendar Services IT policy rule
- Allow Other Message Services IT policy rule
- Allow Public AIM Services IT policy rule
- Allow Public Google Talk Services IT policy rule
- Allow Public ICQ Services IT policy rule
- Allow Public IM Services IT policy rule
- Allow Public WLM Services IT policy rule
- Allow Public Yahoo! Messenger Services IT policy rule
- SIM Application Toolkit policy group
- Smart Dialing policy group
- TCP policy group
- TLS Application policy group
- TLS Device Side Only IT policy rule
- TLS Disable Invalid Connection IT policy rule
- TLS Disable Untrusted Connection IT policy rule
- TLS Disable Weak Ciphers IT policy rule
- TLS Minimum Strong DH Key Length IT policy rule
- TLS Minimum Strong DSA Key Length IT policy rule
- TLS Minimum Strong ECC Key Length IT policy rule
- TLS Minimum Strong RSA Key Length IT policy rule
- TLS Restrict FIPS Ciphers IT policy rule
- Visual Voice Mail policy group
- VoIP policy group
- Allow VoIP IT policy rule
- Disable VoIP User Profiles IT policy rule
- SIP Authentication ID IT policy rule
- SIP Domain IT policy rule
- SIP Local Port IT policy rule
- SIP Realm IT policy rule
- SIP Registration Timeout IT policy rule
- SIP RTP Media Port IT policy rule
- SIP Server Name IT policy rule
- SIP Server Port IT policy rule
- SIP Server Transport IT policy rule
- SIP Server Type IT policy rule
- SIP User ID IT policy rule
- SIP User Password IT policy
- SIP User Display Name IT policy rule
- VoIP Allow BlackBerry Device Changes IT policy rule
- VoIP Emergency Number IT policy rule
- VoIP Enable Attended Call Transfer IT policy rule
- VoIP Enable Call Hold IT policy rule
- VoIP Enable Unattended Call Transfer IT policy rule
- VPN policy group
- Enable VPN IT policy rule
- Disable VPN User Profiles IT policy rule
- Use VPN Xauth IT policy rule
- VPN Allow Handheld Changes IT policy rule
- VPN Allow Password Save IT policy rule
- VPN Disable Prompt for Credentials Re-Entry IT policy rule
- VPN DNS Configuration IT policy rule
- VPN Domain Name IT policy rule
- VPN Gateway Address IT policy rule
- VPN Group Name IT policy rule
- VPN Group Password IT policy rule
- VPN IKE Cipher IT policy rule
- VPN IKE DH Group IT policy rule
- VPN IKE Hash IT policy rule
- VPN IPSec Cipher and Hash IT policy rule
- VPN Minimal Certificate Encryption Key Security Level IT policy rule
- VPN NAT Keep Alive IT policy rule
- VPN Password Hidden on Input IT policy rule
- VPN PFS IT policy rule
- VPN Primary DNS IT policy rule
- VPN Secondary DNS IT policy rule
- VPN User Name IT policy rule
- VPN User Password IT policy rule
- VPN Vendor Type IT policy rule
- VPN Xauth Type IT policy rule
- Wireless Software Upgrades policy group
- Allow Non Enterprise Upgrade IT policy rule
- Disallow Device User Requested Rollback IT policy rule
- Disallow Device User Requested Upgrade IT policy rule
- Disallow Patch Download Over International Roaming WAN IT policy rule
- Disallow Patch Download Over Roaming WAN IT policy rule
- Disallow Patch Download Over WAN IT policy rule
- Disallow Patch Download Over Wi-Fi IT policy rule
- Wi-Fi policy group
- BlackBerry Infrastructure Wi-Fi Access Mode IT policy rule
- Blocked Wi-Fi SSIDs IT policy rule
- Disable GAN-Only Mode IT policy rule
- Disable GAN-Preferred Mode IT policy rule
- Disable GAN Selection Mode Editing IT policy rule
- Disable WAN-Only Mode IT policy rule
- Disable WAN-Preferred Mode IT policy rule
- Disable Wi-Fi IT policy rule
- Disable Wi-Fi Direct Access to BlackBerry Enterprise Server IT policy rule
- Disable Wi-Fi User Profiles IT policy rule
- GAN Signal Quality Threshold IT policy rule
- GAN Signal Strength Threshold IT policy rule
- GAN Wi-Fi Threshold IT policy rule
- Wi-Fi Allow Handheld Changes IT policy rule
- Wi-Fi Default Gateway IT policy rule
- Wi-Fi Default KEY ID IT policy rule
- Wi-Fi DHCP Configuration IT policy rule
- Wi-Fi Disable Prompt for Credentials Re-Entry IT policy rule
- Wi-Fi Enable Authentication Page IT policy rule
- Wi-Fi IP Address IT policy rule
- Wi-Fi Link Security IT policy rule
- Wi-Fi Minimal EAP-TLS Certificate Encryption Key Security Level IT policy rule
- Wi-Fi Password Hidden on Input IT policy rule
- Wi-Fi Preshared Key IT policy rule
- Wi-Fi Primary DNS IT policy rule
- Wi-Fi Profile Forwarding Mode IT policy rule
- Wi-Fi Secondary DNS IT policy rule
- Wi-Fi SSID IT policy rule
- Wi-Fi Subnet Mask IT policy rule
- Wi-Fi User Name IT policy rule
- Wi-Fi User Password IT policy rule
- Wi-Fi WEP Key 1 IT policy rule
- Wi-Fi WEP Key 2 IT policy rule
- Wi-Fi WEP Key 3 IT policy rule
- Wi-Fi WEP Key 4 IT policy rule
- WTLS Application policy group
- WTLS Disable Invalid Connection IT policy rule
- WTLS Disable Untrusted Connection IT policy rule
- WTLS Disable Weak Ciphers IT policy rule
- WTLS Minimum Strong DH Key Length IT policy rule
- WTLS Minimum Strong ECC Key Length IT policy rule
- WTLS Minimum Strong RSA Key Length IT policy rule
- WTLS Restrict FIPS Ciphers IT policy rule
- Descriptions of application control policy rules
- Configuration settings
- Examples of security policy goals
- Provide feedback
- Glossary
- Legal notice
BlackBerry Manuals & Help
>
Administrator Documentation
>
BlackBerry Enterprise Server 5 Security
>
Policy Reference Guide
BlackBerry Enterprise Server - 5.0
VPN DNS Configuration IT policy rule
Default value
The default value is Yes. A BlackBerry® device retrieves DNS settings from the VPN gateway.
Usage
To require that a BlackBerry device use the static settings that are specified in the VPN Primary DNS IT policy rule, VPN Secondary DNS IT policy rule, and VPN Domain Name IT policy rule, change this rule to No.
Parent topic: VPN policy group