Skip Navigation

Configure direct connect using a reverse proxy

  • Create a public DNS entry for the
    BlackBerry Proxy
    cluster. This is the address that clients will use to connect to the externally facing reverse proxy appliance.
    You must configure multiple public DNS entries if you have multiple
    Direct Connect
    -enabled proxy clusters.
  • Configure the external firewall to allow inbound connections on port 17533 to the reverse proxy or appliance.
  • If the reverse proxy or appliance is installed in a DMZ, ensure that port 17533 is open from the proxy to each
    BlackBerry Connectivity Node
    .
  • If the
    BlackBerry Connectivity Node
    instances are also installed in a DMZ, ensure that the appropriate ports are open between each
    BlackBerry Connectivity Node
    and any application servers that the
    BlackBerry Dynamics
    apps need to access (for example,
    Microsoft Exchange
    , internal web servers, and the
    BlackBerry UEM Core
    ).
  1. In the management console, on the menu bar, click
    Settings > BlackBerry Dynamics
    .
  2. Click
    Direct Connect
    .
  3. Click a
    BlackBerry Proxy
    instance.
  4. To turn on
    Direct Connect
    , select the
    Turn on Direct Connect
    check box. In the
    BlackBerry Proxy host name
    field, specify the public FQDN entry you created for the
    BlackBerry Proxy
    cluster. The same host name value will be used for all
    BlackBerry Proxy
    instances. Load balancing must be handled by the reverse proxy or appliance.
  5. Repeat steps 3 and 4 for all
    BlackBerry Proxy
    instances in the cluster.
    To enable only some
    BlackBerry Proxy
    instances for
    Direct Connect
    , create a new
    BlackBerry Proxy
    cluster. All servers in a cluster must have the same configuration. For more information, see Manage BlackBerry Proxy clusters in the
    UEM
    Configuration Guide.
  6. Click
    Save
    .