Scenario 3: Route some traffic internally for most apps but configure a proxy server specifically for web browsing using BlackBerry Access Skip Navigation

Scenario 3: Route some traffic internally for most apps but configure a proxy server specifically for web browsing using
BlackBerry Access

This configuration is appropriate for organizations that require traffic for apps to be routed internally, but require more complex routing through a web proxy server specifically for browser traffic.
For example, your organization might decide that it is acceptable for
BlackBerry Work
to connect to
Microsoft Office 365
servers directly.
SharePoint
is still internal, though, so some traffic must route through the
BlackBerry Proxy
. However, browsing is more tightly controlled, and any traffic from
BlackBerry Access
should route through a web proxy server for monitoring and logging.
This configuration can also include a web proxy server configuration at the
BlackBerry Proxy
server level, but for this example we assume direct connectivity is available from the
BlackBerry Proxy
.
BlackBerry Dynamics
connectivity profile
  1. Set the
    Default allowed domain route type
    to
    Direct
    .
  2. Under
    Allowed domains
    , add all internal domains that you want to route through the
    BlackBerry Proxy
    and select a
    BlackBerry Proxy
    cluster.
  3. (Optional) Add specific servers that are not already included under
    Additional servers
    and select a
    BlackBerry Proxy
    cluster.
If you plan to specify an internally hosted web proxy server in the app-specific configuration, you must include that web proxy server URL either in the Allowed domains list or the Additional servers list. If the web proxy server URL is not set to route through the
BlackBerry Proxy
, then connections to the web proxy server will fail. If the web proxy server is accessible publicly, this step is not required.
BlackBerry Proxy
server web proxy server
This example assumes that the
BlackBerry Proxy
servers have direct access to the Internet. If not, or if you need to specifically configure a proxy for
BlackBerry Dynamics NOC
connections, configure a web proxy server as needed.
App-specific web proxy server
If a web proxy server is required for a specific app (for example,
BlackBerry Access
for browsing, or other third-party apps), you must use the App configuration for that app. Consult third-party vendors for specifics on whether an app-specific proxy is supported and how to configure it.
If an app-specific web proxy server is configured, the
BlackBerry Dynamics
app evaluates the proxy and PAC rules locally on the device before
BlackBerry Dynamics
connectivity profile rules are evaluated. It is important, therefore, that any proxy URLs configured using the manual proxy, or that can be returned by the PAC file, must be appropriately configured in the
BlackBerry Dynamics
connectivity profile.
  1. Go to
    Apps
    , then click on the app you want to configure (for example,
    BlackBerry Access
    ).
  2. Under
    App configuration
    , create a new configuration or edit an existing one.
  3. For
    BlackBerry Access
    , on the
    Network
    tab, select
    Enable Web Proxy
    and
    Use Proxy Auto Configuration
    as required.
For more information, see Troubleshoot routing issues in the BlackBerry Access content.