Skip Navigation

Data flow: Accessing a cloud-based application

This data flow describes how data travels between devices and a cloud-based SaaS application using
BlackBerry Gateway
.
  1. The user opens an app and attempts to access a cloud-based application outside of your private network.
  2. The
    Gateway
    Agent sends the encrypted data through a secure tunnel to
    BlackBerry Gateway
    in the
    BlackBerry Infrastructure
    .
  3. BlackBerry Gateway
    performs the following actions:
    1. Determines, based on the network control policy whether the user has access to that location.
    2. If the user has access, sends the encrypted data to the SaaS application.
  4. If source IP pinning is enabled, the SaaS application verifies that the connection is coming from an IP address that is associated with your
    BlackBerry Gateway
    tenant before allowing access.