Skip Navigation

Configure direct connect using a reverse proxy

  • Create a public DNS entry for the 
    BlackBerry Proxy
     cluster. This is the address that clients will use to connect to the externally facing reverse proxy appliance.
    You must configure multiple public DNS entries if you have multiple 
    Direct Connect
    -enabled proxy clusters.
  • Configure the external firewall to allow inbound connections on port 17533 to the reverse proxy or appliance.
  • If the reverse proxy or appliance is installed in a DMZ, ensure that port 17533 is open from the proxy to each 
    BlackBerry Connectivity Node
    .
  • If the 
    BlackBerry Connectivity Node
     instances are also installed in a DMZ, ensure that the appropriate ports are open between each 
    BlackBerry Connectivity Node
     and any application servers that the 
    BlackBerry Dynamics
     apps need to access (for example, 
    Microsoft Exchange
    , internal web servers, and the 
    BlackBerry UEM Core
    ).
  1. In the management console, on the menu bar, click 
    Settings > BlackBerry Dynamics
  2. Click 
    Direct Connect
  3. Click a 
    BlackBerry Proxy
     instance. 
  4. To turn on 
    Direct Connect
    , select the 
    Turn on Direct Connect
     check box. In the 
    BlackBerry Proxy host name
     field, specify the public FQDN entry you created for the 
    BlackBerry Proxy
     cluster. The same host name value will be used for all 
    BlackBerry Proxy
     instances. Load balancing must be handled by the reverse proxy or appliance. 
  5. Repeat steps 3 and 4 for all 
    BlackBerry Proxy
     instances in the cluster. 
    To enable only some 
    BlackBerry Proxy
     instances for 
    Direct Connect
    , create a new 
    BlackBerry Proxy
     cluster. All servers in a cluster must have the same configuration. For more information, see Manage BlackBerry Proxy clusters in the Configuration content.
  6. Click 
    Save
    .