Configuring network firewalls to work with BES10 Cloud

Article ID: KB35415

Type: Support Content

Last Modified: 12-06-2013


Product(s) Affected:

  • BlackBerry 10
  • BlackBerry Enterprise Service 10
  • BES10 Client for iOS
  • BES10 Client for Android
  • BES10 Cloud
  • BlackBerry Cloud Connector
  • BlackBerry Enterprise Service 10
  • BES10 Client

Using BES10 Cloud as the Mobile Device Management (MDM) solution does not require any firewall configuration, however there are some situations in which firewall configuration must be considered:

  • If a device is using Wi-Fi only, firewall ports must be correctly configured to allow Wi-Fi network communication outside of the firewall.
  • If the optional BlackBerry Cloud Connector service is installed.

Configure the following outbound ports for devices on the Wi-Fi network:
  • Connection from devices to the BlackBerry Infrastructure require ports 80 and 443 to *
  • Connection from iOS devices to APNs require port 5223 to
  • Connection from Android devices to GCM require ports 5228 and 5229 to, and port 5230 to

Configure the following outbound bi-directional ports for the BlackBerry Cloud Connector:

  • port 443 (HTTPS) and 3101 (TCP) to *
CollapseAdditional Information
For IP address information including region specific or upcoming IP address information see KB34193.


By downloading, accessing or otherwise using the Knowledge Base documents you agree:

   (a) that the terms of use for the documents found at apply to your use or reference to these documents; and

   (b) not to copy, distribute, disclose or reproduce, in full or in part any of the documents without the express written consent of RIM.

Visit the BlackBerry Technical Solution Center at