Methods for routing traffic for BlackBerry Dynamics apps

BlackBerry UEM provides several options that allow you to control how BlackBerry Dynamics traffic is routed. By default, all BlackBerry Dynamics app traffic routes directly to the Internet with no web proxy server configurations. This section discusses only configurations that affect overall routing.

Routing for BlackBerry Dynamics apps can be changed by the following configurations:

Configuration

Details

Assigned BlackBerry Dynamics connectivity profile
  • The only item configured in the default BlackBerry Dynamics connectivity profile is the Default allowed domain route type, which is set to Direct.
  • Using the default BlackBerry Dynamics connectivity profile, no internal servers or domains are accessible to BlackBerry Dynamics apps. You can change the default connectivity profile or create a new profile to allow connectivity to internal servers.
  • For more information, see Create a BlackBerry Dynamics connectivity profile in the Administration content.

BlackBerry Proxy web proxy server configuration
  • By default, BlackBerry Proxy is not configured to use a web proxy server. Each BlackBerry Proxy server attempts to connect directly to the Internet to make connections. This applies to both app server traffic and to BlackBerry Dynamics NOC connections.
  • For information about configuring BlackBerry Proxy, see Sending BlackBerry Dynamics app data through an HTTP proxy.
  • In the BlackBerry Dynamics connectivity profile, you can specify the servers that BlackBerry Dynamics apps are allowed to access through the firewall using BlackBerry Proxy. For more information, see Create a BlackBerry Dynamics connectivity profile in the Administration content.
  • Routing traffic through BlackBerry Proxy allows web browsers and BlackBerry Dynamics apps on devices to connect to any server behind the firewall that is reachable by BlackBerry Proxy, and allows you to easily monitor data traffic between BlackBerry Dynamics apps and your organization's resources.
  • Consider the following when choosing to route data through a BlackBerry Proxy server:
    • Establishing connections to servers on the Internet can take longer.
    • If you are using a web proxy to allow access to external sites and have settings configured in your proxy to restrict certain sites, when you select the Route all traffic option, you also need to set the proxy properties in BlackBerry Proxy. Otherwise, apps will not be able to access external sites.
    • BlackBerry Access can be configured with a PAC file that determines allowable sites. In this case, the PAC file determines the proxy settings. For more information, see the BlackBerry Access Administration Guide.

App-specific settings
  • App-specific configuration may be required for apps to connect to specific servers (for example, for BlackBerry Work configured with the URL of the Microsoft Exchange Server). Review the documentation for the BlackBerry Dynamics apps to understand which app configurations to apply.
  • BlackBerry Access and some third-party apps allow app-level web proxy server configurations. The default configuration for BlackBerry Access has no web proxy server configuration applied.
  • An app server is a server that a BlackBerry Dynamics app connects to, such as the URL of a Microsoft Exchange Server, the URL for BEMS, the URL for Skype for Business, or any URL that BlackBerry Access browses to. The BlackBerry Dynamics NOC and the BlackBerry UEM Core server are not app servers.

If you configure and assign a BlackBerry Dynamics connectivity profile and a web proxy configuration for BlackBerry Proxy servers, the BlackBerry Dynamics connectivity profile is always checked first. When traffic arrives at the BlackBerry Proxy server, the PAC or web proxy configuration set on the BlackBerry Proxy server is evaluated for connectivity. Configuring a web proxy on the BlackBerry Proxy server controls how that BlackBerry Proxy handles sending traffic out to the Internet, it does not affect how the BlackBerry Dynamics app on the device evaluates connections.