Scenario 3: Route some traffic internally for most apps but configure a proxy server specifically for web browsing using BlackBerry Access
BlackBerry Access
This configuration is appropriate for organizations that require traffic for apps to be routed internally, but require more complex routing through a web proxy server specifically for browser traffic.
For example, your organization might decide that it is acceptable for
BlackBerry Work
to connect to Microsoft Office
365
servers directly. SharePoint
is still internal, though, so some traffic must route through the BlackBerry Proxy
. However, browsing is more tightly controlled, and any traffic from BlackBerry Access
should route through a web proxy server for monitoring and logging.This configuration can also include a web proxy server configuration at the
BlackBerry Proxy
server level, but for this example we assume direct connectivity is available from the BlackBerry Proxy
.BlackBerry
Dynamics
connectivity profile- Set theDefault allowed domain route typetoDirect.
- UnderAllowed domains, add all internal domains that you want to route through theBlackBerry Proxyand select aBlackBerry Proxycluster.
- (Optional) Add specific servers that are not already included underAdditional serversand select aBlackBerry Proxycluster.
If you plan to specify an internally hosted web proxy server in the app-specific configuration, you must include that web proxy server URL either in the Allowed domains list or the Additional servers list. If the web proxy server URL is not set to route through the
BlackBerry Proxy
, then connections to the web proxy server will fail. If the web proxy server is accessible publicly, this step is not required.BlackBerry Proxy
server web proxy serverThis example assumes that the
BlackBerry Proxy
servers have direct access to the Internet. If not, or if you need to specifically configure a proxy for BlackBerry Dynamics NOC
connections, configure a web proxy server as needed. App-specific web proxy server
If a web proxy server is required for a specific app (for example,
BlackBerry Access
for browsing, or other third-party apps), you must use the App configuration for that app. Consult third-party vendors for specifics on whether an app-specific proxy is supported and how to configure it.If an app-specific web proxy server is configured, the
BlackBerry
Dynamics
app evaluates the proxy and PAC rules locally on the device before BlackBerry
Dynamics
connectivity profile rules are evaluated. It is important, therefore, that any proxy URLs configured using the manual proxy, or that can be returned by the PAC file, must be appropriately configured in the BlackBerry
Dynamics
connectivity profile.- Go toApps, then click on the app you want to configure (for example,BlackBerry Access).
- UnderApp configuration, create a new configuration or edit an existing one.
- ForBlackBerry Access, on theNetworktab, selectEnable Web ProxyandUse Proxy Auto Configurationas required.