zazanwunyephilip
asked on
Blackberry firewall NAT issues
Hi Guys
I installed BlackBerry Ent Server on Friday. Completed all the dos and donts. Was able to register a device with it. Downloaded and sent mails from the device repeatedly.
On getting to office monday, I see the device I switched off was still running but last update was friday. Tried sending mails but couldn't from the blackberry device. Sent Email from the server.
Server is in DMZ. can ping all internal network but cant ping anything on the internet. Testing the router I get connection timeout 10060.
I am unable to connect to the internet. The firewall is as I set it on friday. This is driving me mad. Does anyone have an idea what could have stopped this server from working?
I noticed that as soon as I nat the DMZ ip address on the firewall, the Blackberry server will no longer connect to the internet and tine out on ping requests. Does anyone know how to work around this issue?
Thanks
I installed BlackBerry Ent Server on Friday. Completed all the dos and donts. Was able to register a device with it. Downloaded and sent mails from the device repeatedly.
On getting to office monday, I see the device I switched off was still running but last update was friday. Tried sending mails but couldn't from the blackberry device. Sent Email from the server.
Server is in DMZ. can ping all internal network but cant ping anything on the internet. Testing the router I get connection timeout 10060.
I am unable to connect to the internet. The firewall is as I set it on friday. This is driving me mad. Does anyone have an idea what could have stopped this server from working?
I noticed that as soon as I nat the DMZ ip address on the firewall, the Blackberry server will no longer connect to the internet and tine out on ping requests. Does anyone know how to work around this issue?
Thanks
ASKER
Sweethearts,
I figured it all out without succumbing to a panic attack!!!!. Its all working now. I just opened port 3101 from the firewall using any to the srp on 3101 rather than exposing the BES to the internet.
I am going through the security policies to tighten it all up.
At the moment I am just having small issues with https but will continue tomorrow.
Its so wonderful to partner with you guys.
Thanks
I figured it all out without succumbing to a panic attack!!!!. Its all working now. I just opened port 3101 from the firewall using any to the srp on 3101 rather than exposing the BES to the internet.
I am going through the security policies to tighten it all up.
At the moment I am just having small issues with https but will continue tomorrow.
Its so wonderful to partner with you guys.
Thanks
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Blackberry is all push, the BES makes a connection to the servers at RIM. I have not had to make a single firewall change for inbound traffic for a BES for all those that I have setup. That of course depends on your firewall setup.
On that basis I wonder why you have put the BES in the DMZ. The Blackberry devices don't connect to it directly, and it doesn't need to be exposed to the internet to operate.
Simon.