Firewall and connection requirements for access to the BlackBerry Infrastructure using Wi-Fi technology

Article ID: KB24611

Type: Support Content

Last Modified: 11-05-2014

 

Product(s) Affected:

  • BlackBerry Internet Service
  • BlackBerry Enterprise Server 5
CollapseEnvironment
  • BlackBerry smartphones
  • Wi-Fi technology
CollapseOverview

A BlackBerry smartphone has the ability to connect over a Wi-Fi connection to the BlackBerry Infrastructure, invoking a least-cost routing metric. When a successful Wi-Fi connection is established, BlackBerry traffic from the smartphone uses this connection as the preferred path. An SSL connection is established to BlackBerry Infrastructure's RCP hosts over the default SSL port of TCP/443. The connection is comparable to Internet browsing to a secure (HTTPS) web site. However, some users may restrict access through firewalls or other network security appliances.

To establish a connection to the BlackBerry Infrastructure over Wi-Fi, verify the following information when the smartphone is behind a firewall:

On the firewall, verify that TCP port 443 is open for outbound initiated, bi-directional traffic.

Depending on the firewall interface, complete one of the following additions:

  • If the firewall has the ability to specify acceptable external host names, add blackberry.net and blackberry.com as an acceptable sub-domain
  • If the firewall has the ability to specify acceptable external Internet Protocol (IP) addresses, add the following range of IP addresses to the allowed list:

 

IP Address Netmask
206.51.26.0 / 24 Netmask = 255.255.255.0
193.109.81.0 / 24 Netmask = 255.255.255.0
103.246.200.0 / 22 Netmask = 255.255.252.0
216.9.240.0 / 20 Netmask = 255.255.240.0
206.53.144.0 / 20 Netmask = 255.255.240.0
67.223.64.0 / 19 Netmask = 255.255.224.0
93.186.16.0 / 20 Netmask = 255.255.240.0
68.171.224.0 / 19 Netmask = 255.255.224.0
74.82.64.0 / 19 Netmask = 255.255.224.0
173.247.32.0 / 19 Netmask = 255.255.224.0
178.239.80.0 / 20 Netmask = 255.255.240.0
5.100.168.0 / 21 Netmask = 255.255.248.0
131.177.168.0 / 21 Netmask = 255.255.248.0


Note: Ideally, the complete IP address ranges listed above should be allowed through the user's firewall in order to avoid Wi-Fi connection issues in the event that IP addresses change in the future.

CollapseAdditional Information

The IP addresses listed in the preceding tables are current as of the date of publication and are subject to change. Please contact BlackBerry Technical Support Services for more information.

Disclaimer

By downloading, accessing or otherwise using the Knowledge Base documents you agree:

   (a) that the terms of use for the documents found at www.blackberry.com/legal/knowledgebase apply to your use or reference to these documents; and

   (b) not to copy, distribute, disclose or reproduce, in full or in part any of the documents without the express written consent of RIM.


Visit the BlackBerry Technical Solution Center at www.blackberry.com/btsc.