Skip Navigation

How
BlackBerry Gateway
routes data

When
BlackBerry Gateway
is active on a device,
Gateway
routes network traffic in the following ways.
Destination
Action
Allowed destination on the private network
Users can access destinations on your private network only if they are explicitly allowed by the network access control policy.
All data between the device and your private network is encrypted using industry-leading tunnel technology and routed through secure tunnels from the
BlackBerry Protect
app or
Gateway
Agent to the
BlackBerry Infrastructure
and then from the
BlackBerry Infrastructure
to the
Gateway Connector
installed behind your firewall.
Allowed Internet destination
Users can connect to any public Internet destination unless it is explicitly blocked by your network access control policy or determined by
BlackBerry
to be a potentially malicious destination.
Connections to public Internet destinations are routed through the secure tunnel between the
BlackBerry Protect
app or
Gateway
Agent and the
BlackBerry Infrastructure
and then
BlackBerry Gateway
routes the traffic to the destination.
If you enable split tunneling, traffic safe Internet destinations is routed directly to the destination rather than through the tunnel to
BlackBerry Gateway
. For example, you can choose to reduce the traffic sent through
BlackBerry Gateway
by allowing traffic to safe public sites to route directly to the destination.
Allowed SaaS app
By default, connections to SaaS apps are routed in the same way as connections to other Internet destinations.
If you enable source IP pinning, you can configure your SaaS app tenant to only accept connections from your organization's own IP addresses and
BlackBerry Gateway
.
Blocked destination on the private network
Users can access destinations on your private network only if they are explicitly allowed by the network access control policy. If the destination is not allowed,
BlackBerry Gateway
blocks the connection and doesn't route the data to the
Gateway Connector
.
Blocked Internet destination
If a destination is explicitly blocked by your network access control policy or determined by
BlackBerry
to be a potentially malicious destination,
BlackBerry Gateway
can block the connection.