Outbound connections: Devices on a work Wi-Fi network

iOS, Android, and Windows devices that use your work Wi-Fi network use the following outbound ports to connect to the BlackBerry Infrastructure and external services. Configure your organization's firewall to allow outbound two-way connections over these ports.

For more information about outbound connections for devices with BlackBerry Dynamics apps, devices using BlackBerry Protect Mobile, and for BlackBerry Analytics, see Mobile device configuration (Wi-Fi requirements).

From

To

Purpose

Protocol

Port

iOS

Android

Windows devices

BlackBerry Infrastructure

To connect to the <region>.bbsecure.com subdomain when activating the device
  1. HTTP CONNECT to BlackBerry Infrastructure; creates tunnel from device to BlackBerry UEM
  2. TLS session between device and BlackBerry UEM

443

Android

BlackBerry Infrastructure

To connect to the <region>.bbsecure.com subdomain so that administration commands can be applied to the devices
  1. HTTP CONNECT to BlackBerry Infrastructure; creates tunnel from device to BlackBerry UEM
  2. TLS session between device and BlackBerry UEM

443

iOS

BlackBerry Infrastructure

To connect to the <region>.bbsecure.com subdomain so that administration commands can be applied to the devices

TLS

443

Windows devices

BlackBerry Infrastructure

To connect to the <region>.bbsecure.com subdomain so that administration commands can be applied to the devices

HTTPS; includes TLS handshake using SNI

443

iOS

APNs

To connect to gateway.push.apple.com to receive notifications from APNs

TCP

5223

Android

FCM

To connect to android.apis.google.com (ports 5228 and 5229) and android.googleapis.com (port 5230) to receive notifications from FCM

TCP

5228

5229

5230