Configure direct connect using a reverse proxy

  • Create a public DNS entry for the BlackBerry Proxy cluster. This is the address that clients will use to connect to the externally facing reverse proxy appliance.
    Note: You must configure multiple public DNS entries if you have multiple Direct Connect-enabled proxy clusters.
  • Configure the external firewall to allow inbound connections on port 17533 to the reverse proxy or appliance.
  • If the reverse proxy or appliance is installed in a DMZ, ensure that port 17533 is open from the proxy to each BlackBerry Connectivity Node.
  • If the BlackBerry Connectivity Node instances are also installed in a DMZ, ensure that the appropriate ports are open between each BlackBerry Connectivity Node and any application servers that the BlackBerry Dynamics apps need to access (for example, Microsoft Exchange, internal web servers, and the BlackBerry UEM Core).
  1. In the management console, on the menu bar, click Settings > BlackBerry Dynamics.
  2. Click Direct Connect.
  3. Click a BlackBerry Proxy instance.
  4. To turn on Direct Connect, select the Turn on Direct Connect check box. In the BlackBerry Proxy host name field, specify the public FQDN entry you created for the BlackBerry Proxy cluster. The same host name value will be used for all BlackBerry Proxy instances. Load balancing must be handled by the reverse proxy or appliance.
  5. Repeat steps 3 and 4 for all BlackBerry Proxy instances in the cluster.
    To enable only some BlackBerry Proxy instances for Direct Connect, create a new BlackBerry Proxy cluster. All servers in a cluster must have the same configuration. For more information, see Manage BlackBerry Proxy clusters in the UEM Configuration Guide.
  6. Click Save.