Does a BES need inbound web connections?

[Tiassa]

I'm in a situation where I'm auditing a BES install. As I'm going through the firewall settings I notice that there are entries labeled "Blackberry Web" and "Blackberry Secure Web" that direct ports 8080 and 8443 to the BES's box. I figured that you need 3101, but I'm trying to figure out what the 8080 and 8443 are used for. Is that what you need to if you are going to let the BES do all the surfing for the BB users? These people don't do that so I'm thinking I can just kill these rules, but I wanted a 2nd opinion.

[titanjhb]

Do you use any push services?

[CanuckBB]

BES requires 3101 outbound to talk to the RIM infrastructure.

Inbound 8080 and 8443 sound like setup for off site BAS access.