Skip Navigation
  1. BlackBerry Docs
  2. BlackBerry UEM 12.17
  3. Planning and Architecture
  4. BlackBerry UEM and BEMS Planning Guide
  5. Port requirements
  6. Outbound connections: Devices on a work Wi-Fi network

Outbound connections: Devices on a work
Wi-Fi
 network

BlackBerry 10
,
iOS
,
Android
, and
Windows
 devices that use your work
Wi-Fi
 network use the following outbound ports to connect to the
BlackBerry Infrastructure
 and external services. Configure your organization's firewall to allow outbound two-way connections over these ports.
Refer to Mobile device configuration (Wi-Fi requirements) for details about outbound connections for devices with
BlackBerry Dynamics
 apps, devices using
CylancePROTECT
, and for
BlackBerry Analytics
.
From
To
Purpose
Protocol
Port
BlackBerry 10
BlackBerry Infrastructure
To connect to *.rdns.blackberry.net and primary DNS host iceberg.blackberry.com if "Use cloud services to find more info about the contacts that you add to the Contacts app" is enabled in the Contacts settings.
  1. HTTP CONNECT to
    BlackBerry Infrastructure
    ; creates tunnel from device to
    BlackBerry UEM
     outbound to
    BlackBerry Infrastructure
  2. TLS session between device and
    BlackBerry UEM
443
BlackBerry 10
iOS
Android
Windows
 devices
BlackBerry Infrastructure
To connect to the
<region>
.bbsecure.com subdomain when activating the device.
  1. HTTP CONNECT to
    BlackBerry Infrastructure
    ; creates tunnel from device to
    BlackBerry UEM
  2. TLS session between device and
    BlackBerry UEM
443
BlackBerry 10
Android
BlackBerry Infrastructure
To connect to the
<region>
.bbsecure.com subdomain so that administration commands can be applied to the devices.
  1. HTTP CONNECT to
    BlackBerry Infrastructure
    ; creates tunnel from device to
    BlackBerry UEM
  2. TLS session between device and
    BlackBerry UEM
443
iOS
BlackBerry Infrastructure
To connect to the
<region>
.bbsecure.com subdomain so that administration commands can be applied to the devices.
TLS
443
Windows
 devices
BlackBerry Infrastructure
To connect to the
<region>
.bbsecure.com subdomain so that administration commands can be applied to the devices.
HTTPS; includes TLS handshake using SNI
443
iOS
APNs
To connect to gateway.push.apple.com to receive notifications from APNs.
TCP
5223
Android
FCM
To connect to android.apis.google.com (ports 5228 and 5229) and android.googleapis.com (port 5230) to receive notifications from FCM.
TCP
5228
5229
5230