Server configuration
The recommended and least restrictive firewall configuration is to enable the listed TCP ports to carry outbound-initiated bidirectional communications to the blackberry.com and bbsecure.com subdomains.
<region>
represents a unique region code depending on the EULA selected during installation. For example, if Canada was selected, then <region>
is ca. To find a specific country code, see the ISO Standard.Usage | TCP port | Protocol | Domain |
|---|---|---|---|
Required for March 2025 and later: BlackBerry UEM Core BlackBerry Proxy BlackBerry
Dynamics services | 443 | TCP | prod.dynamics.blackberry.com prod-mdc.dynamics.blackberry.com |
BlackBerry UEM Core BlackBerry Proxy App servers | 443 | TCP | gdmdc.good.com |
BlackBerry Proxy | 443 | TCP | gdrelay.good.com gdentgw.good.com |
BlackBerry UEM Core BlackBerry Proxy BlackBerry Enterprise Mobility Server | 443 | TCP | gdweb.good.com |
BlackBerry Enterprise Mobility Server | 443 | TCP | login.good.com login.blackberry.com gwupload.good.com gwmonitor.good.com fcm.googleapis.com www.googleapis.com oauth2.googleapis.com accounts.google.com |
BlackBerry UEM Core BlackBerry Proxy | 3101 | TCP | <region> .bbsecure.com |
BlackBerry Connectivity Node | 3101 443 | TCP | <region> .bbsecure.com |
BlackBerry Secure Connect Plus | 3101 | TCP | <region> .turnb.bbsecure.com |
BlackBerry Secure Connect Plus | 443 | HTTPS | <region> .bbsecure.com |
BlackBerry Secure Connect Plus with Knox Workspace | 443 | HTTPS | api.samsungapps.com |