Server configuration
The recommended and least restrictive firewall configuration is to enable the listed TCP ports to carry outbound-initiated bidirectional communications to the blackberry.com and bbsecure.com subdomains.
Usage | TCP port | Protocol | Domain |
|---|---|---|---|
BlackBerry UEM Core , BlackBerry Proxy , app servers | 443 | TCP | gdmdc.good.com |
BlackBerry Proxy | 443 | TCP | gdrelay.good.com |
BlackBerry Proxy | 443 | TCP | gdentgw.good.com |
BlackBerry UEM Core , BlackBerry Proxy , BlackBerry Enterprise Mobility Server | 443 | TCP | gdweb.good.com |
BlackBerry Enterprise Mobility Server | 443 | TCP | login.good.com |
BlackBerry Enterprise Mobility Server | 443 | TCP | gwupload.good.com |
BlackBerry Enterprise Mobility Server | 443 | TCP | gwmonitor.good.com |
BlackBerry Enterprise Mobility Server | 443 | TCP | fcm.googleapis.com |
BlackBerry UEM Core | 3101 | TCP | <region>.bbsecure.com |
BlackBerry Connectivity Node | 3101 | TCP | <region>.bbsecure.com |
BlackBerry Secure Connect Plus | 3101 | TCP | <region>.turnb.bbsecure.com |
BlackBerry Secure Connect Plus with Knox Workspace | 443 | TCP | api.samsungapps.com |
<region> represents a unique region code depending on the EULA selected during installation. For example, if Canada was selected, then <region> is ca. To find a specific country code, see the ISO Standard.