Configure direct connect using a reverse proxy
- Create a public DNS entry for theBlackBerry Proxycluster. This is the address that clients will use to connect to the externally facing reverse proxy appliance.You must configure multiple public DNS entries if you have multipleDirect Connect-enabled proxy clusters.
- Configure the external firewall to allow inbound connections on port 17533 to the reverse proxy or appliance.
- If the reverse proxy or appliance is installed in a DMZ, ensure that port 17533 is open from the proxy to eachBlackBerry Connectivity Node.
- If theBlackBerry Connectivity Nodeinstances are also installed in a DMZ, ensure that the appropriate ports are open between eachBlackBerry Connectivity Nodeand any application servers that theBlackBerry Dynamicsapps need to access (for example,Microsoft Exchange, internal web servers, and theBlackBerry UEM Core).
- In the management console, on the menu bar, clickSettings > BlackBerry Dynamics.
- ClickDirect Connect.
- Click aBlackBerry Proxyinstance.
- To turn onDirect Connect, select theTurn on Direct Connectcheck box. In theBlackBerry Proxy host namefield, specify the public FQDN entry you created for theBlackBerry Proxycluster. The same host name value will be used for allBlackBerry Proxyinstances. Load balancing must be handled by the reverse proxy or appliance.
- Repeat steps 3 and 4 for allBlackBerry Proxyinstances in the cluster.To enable only someBlackBerry Proxyinstances forDirect Connect, create a newBlackBerry Proxycluster. All servers in a cluster must have the same configuration. For more information, see Manage BlackBerry Proxy clusters in the Configuration content.
- ClickSave.