Skip Navigation
  1. BlackBerry Docs
  2. BlackBerry UEM 12.17
  3. Planning and Architecture
  4. BlackBerry UEM Architecture and Data Flows
  5. Sending and receiving work data

Sending and receiving work data

When devices that are active on
BlackBerry UEM
 send and receive work data, they connect to your organization's mail, application, or content servers. For example, when they use the work email or calendar apps, devices establish a connection to your organization's mail server. When they use the work browser to navigate the intranet, devices establish a connection to the web server in your organization, and so on.
Depending on the type of device, the activation type, license types, and configuration settings, a device may establish connections to your organization's servers using the following paths:
Data Path
Description
Work
Wi-Fi
 network
You can use
BlackBerry UEM
 to configure
Wi-Fi
 profiles for devices so that devices can connect to your organization's resources using your work
Wi-Fi
 network.
VPN
You can use
BlackBerry UEM
 to configure VPN profiles for devices or users may configure VPN profiles on their devices so that devices can connect to your organization's resources using a VPN.
BlackBerry UEM
 and the
BlackBerry Infrastructure
 or BlackBerry Dynamics NOC
Depending on the device, activation, and license type, and on the presence of
BlackBerry Dynamics
 apps, devices may be able to use enterprise connectivity to communicate with your organization's resources through
BlackBerry UEM
 and the
BlackBerry Infrastructure
.
  • For
    iOS
     devices, if the devices have an appropriate license, you can enable the
    BlackBerry Secure Gateway
     to allow devices to connect to your work mail server through the
    BlackBerry Infrastructure
     and
    BlackBerry UEM
    . If you use the
    BlackBerry Secure Gateway
    , you don't have to expose your mail server outside of the firewall to allow users with iOS devices to connect to
    Microsoft Exchange
     when they are not connected to your VPN or work
    Wi-Fi
     network.
  • For
    iOS
    ,
    Android Enterprise
    , and
    Samsung Knox Workspace
     devices, if the devices have an appropriate license, you can use enterprise connectivity by enabling
    BlackBerry Secure Connect Plus
    . When devices use
    BlackBerry Secure Connect Plus
    , work data travels in a secure IP tunnel established between apps on the device and your organization's network through the
    BlackBerry Infrastructure
    .
  • BlackBerry Dynamics
     apps installed on devices communicate with
    BlackBerry Proxy
    . Depending on your configuration, data can travel through the
    BlackBerry Dynamics NOC
     or
    BlackBerry Infrastructure
     or can bypass them using
    BlackBerry Dynamics
     Direct Connect.
  • Devices can use enterprise connectivity for all work data. Enterprise connectivity encrypts and authenticates all work data and sends it through
    BlackBerry UEM
     and the
    BlackBerry Infrastructure
    . Enterprise connectivity limits the number of ports that you need to open on your organization's external firewall to a single port, 3101.