Skip Navigation

Outbound connections: Devices on a work
Wi-Fi
network

iOS
,
Android
, and
Windows
devices that use your work
Wi-Fi
network use the following outbound ports to connect to the
BlackBerry Infrastructure
and external services. Configure your organization's firewall to allow outbound two-way connections over these ports.
For more information  about outbound connections for devices with
BlackBerry Dynamics
apps, devices using
CylancePROTECT
, and for
BlackBerry Analytics
, see Mobile device configuration (Wi-Fi requirements).
From
To
Purpose
Protocol
Port
iOS
Android
Windows
devices
BlackBerry Infrastructure
To connect to the
<region>
.bbsecure.com subdomain when activating the device
  1. HTTP CONNECT to
    BlackBerry Infrastructure
    ; creates tunnel from device to
    BlackBerry UEM
  2. TLS session between device and
    BlackBerry UEM
443
Android
BlackBerry Infrastructure
To connect to the
<region>
.bbsecure.com subdomain so that administration commands can be applied to the devices
  1. HTTP CONNECT to
    BlackBerry Infrastructure
    ; creates tunnel from device to
    BlackBerry UEM
  2. TLS session between device and
    BlackBerry UEM
443
iOS
BlackBerry Infrastructure
To connect to the
<region>
.bbsecure.com subdomain so that administration commands can be applied to the devices
TLS
443
Windows
devices
BlackBerry Infrastructure
To connect to the
<region>
.bbsecure.com subdomain so that administration commands can be applied to the devices
HTTPS; includes TLS handshake using SNI
443
iOS
APNs
To connect to gateway.push.apple.com to receive notifications from APNs
TCP
5223
Android
FCM
To connect to android.apis.google.com (ports 5228 and 5229) and android.googleapis.com (port 5230) to receive notifications from FCM
TCP
5228
5229
5230