Scenario 3: Route some traffic internally for most apps but configure a proxy server specifically for web browsing using BlackBerry Access
This configuration is appropriate for organizations that require traffic for apps to be routed internally, but require more complex routing through a web proxy server specifically for browser traffic.
For example, your organization might decide that it is acceptable for
BlackBerry Workto connect to
Microsoft Office 365servers directly.
SharePointis still internal, though, so some traffic must route through the
BlackBerry Proxy. However, browsing is more tightly controlled, and any traffic from
BlackBerry Accessshould route through a web proxy server for monitoring and logging.
This configuration can also include a web proxy server configuration at the
BlackBerry Proxyserver level, but for this example we assume direct connectivity is available from the
BlackBerry Dynamicsconnectivity profile
- Set theDefault allowed domain route typetoDirect.
- UnderAllowed domains, add all internal domains that you want to route through theBlackBerry Proxyand select aBlackBerry Proxycluster.
- (Optional) Add specific servers that are not already included underAdditional serversand select aBlackBerry Proxycluster.
If you plan to specify an internally hosted web proxy server in the app-specific configuration, you must include that web proxy server URL either in the Allowed domains list or the Additional servers list. If the web proxy server URL is not set to route through the
BlackBerry Proxy, then connections to the web proxy server will fail. If the web proxy server is accessible publicly, this step is not required.
See BlackBerry Dynamics connectivity profile settings for more information about how the rules in the connectivity profile are used.
BlackBerry Proxyserver web proxy server
This example assumes that the
BlackBerry Proxyservers have direct access to the Internet. If not, or if you need to specifically configure a proxy for
BlackBerry Dynamics NOCconnections, configure a web proxy server as needed.
App-specific web proxy server
If a web proxy server is required for a specific app (for example,
BlackBerry Accessfor browsing, or other third-party apps), you must use the App configuration for that app.
Consult third-party vendors for specifics on whether an app-specific proxy is supported and how to configure it.
If an app-specific web proxy server is configured, the
BlackBerry Dynamicsapp evaluates the proxy and PAC rules locally on the device before
BlackBerry Dynamicsconnectivity profile rules are evaluated. It is important, therefore, that any proxy URLs configured using the manual proxy, or that can be returned by the PAC file, must be appropriately configured in the
BlackBerry Dynamicsconnectivity profile.
- Go toApps, then click on the app you want to configure (for example,BlackBerry Access).
- UnderApp configuration, create a new configuration or edit an existing one.
- ForBlackBerry Access, on theNetworktab, selectEnable Web ProxyandUse Proxy Auto Configurationas required.