Data flows: Sending and receiving work data

When devices that are active on BlackBerry UEM send and receive work data, they connect to your organization's mail, application, or content servers. For example, when they use the work email or calendar apps, devices establish a connection to your organization's mail server. When they use the work browser to navigate the intranet, devices establish a connection to the web server in your organization, and so on.

This section provides data flows that detail how work data travels through your organization's UEM environment.

Depending on the type of device, the activation type, license types, and configuration settings, a device may establish connections to your organization's servers using the following paths:

Data Path

Description

Work Wi-Fi network

You can use UEM to configure Wi-Fi profiles for devices so that devices can connect to your organization's resources using your work Wi-Fi network.

VPN

You can use UEM to configure VPN profiles for devices or users may configure VPN profiles on their devices so that devices can connect to your organization's resources using a VPN.

UEM and the BlackBerry Infrastructure or BlackBerry Dynamics NOC

Depending on the device, activation, and license type, and on the presence of BlackBerry Dynamics apps, devices may be able to use enterprise connectivity to communicate with your organization's resources through UEM and the BlackBerry Infrastructure.

  • For iOS devices, if the devices have an appropriate license, you can enable the BlackBerry Secure Gateway to allow devices to connect to your work mail server through the BlackBerry Infrastructure and UEM. If you use the BlackBerry Secure Gateway, you don't have to expose your mail server outside of the firewall to allow users with iOS devices to connect to Microsoft Exchange when they are not connected to your VPN or work Wi-Fi network.
  • For iOS, Android Enterprise, and Samsung Knox Workspace devices, if the devices have an appropriate license, you can use enterprise connectivity by enabling BlackBerry Secure Connect Plus. When devices use BlackBerry Secure Connect Plus, work data travels in a secure IP tunnel established between apps on the device and your organization's network through the BlackBerry Infrastructure.
  • BlackBerry Dynamics apps installed on devices communicate with the BlackBerry Proxy. Depending on your configuration, data can travel through the BlackBerry Infrastructure or can bypass it using BlackBerry Dynamics Direct Connect.
  • Devices can use enterprise connectivity for all work data. Enterprise connectivity encrypts and authenticates all work data and sends it through UEM and the BlackBerry Infrastructure. Enterprise connectivity limits the number of ports that you need to open on your organization's external firewall to a single port, 3101.