Skip Navigation

Data flows: Sending and receiving work data

When devices that are active on
BlackBerry UEM
send and receive work data, they connect to your organization's mail, application, or content servers. For example, when they use the work email or calendar apps, devices establish a connection to your organization's mail server. When they use the work browser to navigate the intranet, devices establish a connection to the web server in your organization, and so on.
This section provides data flows that detail how work data travels through your organization's
UEM
environment.
Depending on the type of device, the activation type, license types, and configuration settings, a device may establish connections to your organization's servers using the following paths:
Data Path
Description
Work
Wi-Fi
network
You can use
UEM
to configure
Wi-Fi
profiles for devices so that devices can connect to your organization's resources using your work
Wi-Fi
network.
VPN
You can use
UEM
to configure VPN profiles for devices or users may configure VPN profiles on their devices so that devices can connect to your organization's resources using a VPN.
UEM
and the
BlackBerry Infrastructure
or
BlackBerry Dynamics
NOC
Depending on the device, activation, and license type, and on the presence of
BlackBerry Dynamics
apps, devices may be able to use enterprise connectivity to communicate with your organization's resources through
UEM
and the
BlackBerry Infrastructure
.
  • For
    iOS
    devices, if the devices have an appropriate license, you can enable the
    BlackBerry Secure Gateway
    to allow devices to connect to your work mail server through the
    BlackBerry Infrastructure
    and
    UEM
    . If you use the
    BlackBerry Secure Gateway
    , you don't have to expose your mail server outside of the firewall to allow users with iOS devices to connect to
    Microsoft Exchange
    when they are not connected to your VPN or work
    Wi-Fi
    network.
  • For
    iOS
    ,
    Android Enterprise
    , and
    Samsung Knox Workspace
    devices, if the devices have an appropriate license, you can use enterprise connectivity by enabling
    BlackBerry Secure Connect Plus
    . When devices use
    BlackBerry Secure Connect Plus
    , work data travels in a secure IP tunnel established between apps on the device and your organization's network through the
    BlackBerry Infrastructure
    .
  • BlackBerry Dynamics
    apps installed on devices communicate with
    BlackBerry Proxy
    . Depending on your configuration, data can travel through the
    BlackBerry Dynamics NOC
    or
    BlackBerry Infrastructure
    or can bypass them using
    BlackBerry Dynamics
    Direct Connect.
  • Devices can use enterprise connectivity for all work data. Enterprise connectivity encrypts and authenticates all work data and sends it through
    UEM
    and the
    BlackBerry Infrastructure
    . Enterprise connectivity limits the number of ports that you need to open on your organization's external firewall to a single port, 3101.