Disble firewall in BB Policy

[Manta30]

I recently have been assigned to look after out Blackberry Enterprise Server. So far I've been able to figure things out and no issues have come up. However I do have one user that uses a third party app call Eprocrates. He was able to download and install the app but it refused to update. After talking to the support desk they said the firewall needs to shut off in the IT policy.

I decided to create a new policy so certain users can update 3rd party apps but I'm unsure where to disable the firewall in the Enterprise server program so this policy can run.

The version that we currently have is BlackBerry Enterprise Server Version: 4.1.4.12 (Exchange server)

Does anyone have any ideas?

[eBoyDog]

Chances are it's not the firewall that's blocking the third party app but rather the nature of how the internet data is re-directed though the BES MDS when the device is activated on the BES.

While it's called a 'firewall', it's not like the standard internet firewall, it's just a way to block telephone #'s, SMS and such. I would bet that even if you could disable the device firewall, it would not effect your application but rather it's just a misunderstood target from your 3rd party application people since it's called a "firewall'.

NOW, Being able to add/modify third party apps can be a restriction from an IT policy but the functioning of that third party app, to it's internet data is by default, rerouted though the BES to your company's internet provider.

Try changing the default browser from "BlackBerry Browser' to "Internet Browser" and see if your application behavior changes. That's assuming that the standard "Default IT policy" is being used as this too can be disabled.

It's a little known or understood fact that when a device is activated on BES, the internet data is re-directed though BES to the internet, this so that companies can secure their devices internet better including inforce internet rescrictions. But at times this can slow the device internet down on a device if, say the comapny has a slower internet connection than the wireless provider. I turn BB Browser off to have a faster internet connection on my BB since my companies ISP connection is 10 Mb shared with several thousand users and at times the intranet's internet connection crawels to a stop.

Many BES aware applications will have a choice in how they receive their internet data and will have an option in their setup to use standard TCP or MDS proxy. Standard TCP uses your wireless provider's internet, MDS proxy will use your companies internet re-routed though your device, though your wireless provider, though your BES and finally back to the internet THUS some internet applications have a problem when installed on a BES activated device.

To test were you are getting your BB internet data, try browsing to an intranet available only site on your BES activated device.