Sending and receiving work data 

When devices that are active on 

BlackBerry UEM

 send and receive work data, they connect to your organization's mail, application, or content servers. For example, when they use the work email or calendar apps, devices establish a connection to your organization's mail server. When they use the work browser to navigate the intranet, devices establish a connection to the web server in your organization, and so on.

Depending on the type of device, the activation type, license types, and configuration settings, a device may establish connections to your organization's servers using the following paths:

Data Path	Description
Work  Wi-Fi  network	You can use  BlackBerry UEM  to configure  Wi-Fi  profiles for devices so that devices can connect to your organization's resources using your work  Wi-Fi  network.
VPN	You can use  BlackBerry UEM  to configure VPN profiles for devices or users may configure VPN profiles on their devices so that devices can connect to your organization's resources using a VPN.
BlackBerry UEM  and the  BlackBerry Infrastructure  or BlackBerry Dynamics NOC	Depending on the device, activation, and license type, and on the presence of  BlackBerry Dynamics  apps, devices may be able to use enterprise connectivity to communicate with your organization's resources through  BlackBerry UEM  and the  BlackBerry Infrastructure . For  iOS  devices, if the devices have an appropriate license, you can enable the  BlackBerry Secure Gateway  to allow devices to connect to your work mail server through the  BlackBerry Infrastructure  and  BlackBerry UEM . If you use the  BlackBerry Secure Gateway , you don't have to expose your mail server outside of the firewall to allow users with iOS devices to connect to  Microsoft Exchange  when they are not connected to your VPN or work  Wi-Fi  network. For  BlackBerry 10 ,  iOS ,  Android Enterprise , and  Samsung Knox Workspace  devices, if the devices have an appropriate license, you can use enterprise connectivity by enabling  BlackBerry Secure Connect Plus . When devices use  BlackBerry Secure Connect Plus , work data travels in a secure IP tunnel established between apps on the device and your organization's network through the  BlackBerry Infrastructure . BlackBerry Dynamics  apps installed on devices communicate with  BlackBerry Proxy . Depending on your configuration, data can travel through the  BlackBerry Dynamics NOC  or  BlackBerry Infrastructure  or can bypass them using  BlackBerry Dynamics  Direct Connect. BlackBerry 10  devices can use enterprise connectivity for all work data. Enterprise connectivity encrypts and authenticates all work data and sends it through  BlackBerry UEM  and the  BlackBerry Infrastructure . Enterprise connectivity limits the number of ports that you need to open on your organization's external firewall to a single port, 3101.