- BlackBerry Enterprise Server
- BlackBerry Device Service
- Universal Device Service
To establish a connection when the BlackBerry Enterprise Server, BlackBerry Device Service, and Universal Device Service are behind a firewall, verify the following information:
On the firewall, verify that port 3101 is open for outbound initiated, bi-directional Transmission Control Protocol (TCP) traffic.
In addition to the below information, BlackBerry Enterprise Service 10 requires additional configuration. Please review KB34193 for further firewall configuration requirements.
Use one of the following configurations to specify the ports or host names allowed by the firewall. The configurations are listed from least restrictive to most restrictive:
- If the firewall has the ability to specify acceptable external host names, add blackberry.net and blackberry.com as acceptable sub-domains.
- If the firewall has the ability to specify acceptable external Internet Protocol (IP) addresses, add the following range of IP addresses to the allowed list:
| IP Address | Netmask |
| 206.51.26.0 / 24 | Netmask = 255.255.255.0 |
| 193.109.81.0 / 24 | Netmask = 255.255.255.0 |
| 204.187.87.0 / 24 | Netmask = 255.255.255.0 |
| 216.9.240.0 / 20 | Netmask = 255.255.240.0 |
| 206.53.144.0 / 20 | Netmask = 255.255.240.0 |
| 67.223.64.0 / 19 | Netmask = 255.255.224.0 |
| 93.186.16.0 / 20 | Netmask = 255.255.240.0 |
| 68.171.224.0/19 | Netmask = 255.255.224.0 |
| 74.82.64.0 / 19 | Netmask = 255.255.224.0 |
| 173.247.32.0 / 19 | Netmask = 255.255.224.0 |
| 178.239.80.0 / 20 | Netmask = 255.255.240.0 |
| 180.149.149.0 / 23 | Netmask = 255.255.254.0 |
| 180.149.151.0 / 24 | Netmask = 255.255.255.0 |
| 180.168.204.0 / 22 | Netmask = 255.255.252.0 |
| 5.100.168.0 / 21 | Netmask = 255.255.248.0 |
| 131.117.168.0 / 21 | Netmask = 255.255.248.0 |
- Ideally, complete IP address ranges should be allowed through the user's firewall.
- If the BlackBerry Enterprise Server is configured in a way that will not allow the use of address ranges, individual IP addresses may be allowed.
The following tables list individual IP addresses for each region.
- If BlackBerry smartphone users connect to BlackBerry Enterprise Servers that are located in multiple regions, then the IP addresses for each region will need to be allowed through the firewall.
- Configure the firewall to allow the IP addresses that are associated with the regional location of the BlackBerry Enterprise Server:
| Asia Pacific Region (APAC) excluding People's Republic of China, but including Hong Kong, Macau and Taiwan |
| 206.51.26.124 |
| 216.9.240.6 |
| 68.171.240.33 |
| Canada |
| 216.9.242.6 |
| 68.171.242.6 |
| Europe, the Middle East, and Africa Region (EMEA) |
| 93.186.25.33 |
| 93.186.17.33 |
| 193.109.81.33 |
| Latin America and the Caribbean |
| 216.9.242.32 |
| 68.171.242.32 |
|
People's Republic of China only (CN) not including Hong Kong, Macau or Taiwan |
| 180.149.149.33 |
| Saudi Arabia and United Arab Emirates |
| 131.117.168.49 |
| 5.100.168.49 |
| United States only (US) |
| 216.9.242.33 |
| 68.171.242.33 |
To verify the connection settings, use the following steps:
- Open the BlackBerry Server Configuration tool.
- Select the BlackBerry Router tab.
Note: Do not specify an IP address in the SRP Address field, because the BlackBerry Enterprise Server may lose the connection if the Server Routing Protocol (SRP) address is updated. The SRP address should appear as xx.srp.blackberry.com, where xx is the region.
To determine the SRP address that the BlackBerry Enterprise Server is using, use the SRP Address Look Up Tool.
Disclaimer
By downloading, accessing or otherwise using the Knowledge Base documents you agree:
(a) that the terms of use for the documents found at www.blackberry.com/legal/knowledgebase apply to your use or reference to these documents; and
(b) not to copy, distribute, disclose or reproduce, in full or in part any of the documents without the express written consent of RIM.
Visit the BlackBerry Technical Solution Center at www.blackberry.com/btsc.