Solved

Blackberry users do not get corporate email after ISP change

Posted on 2013-05-20
4
618 Views
Last Modified: 2013-05-21
Hi everyone,
Our company recently changed ISP and since then the blackberry users have lost their connection to the corporate email. The public IP that the BB server is mapped to is different. Users of iphone and android smartphones are able to get their email in their mobile devices without a problem. We already opened TCP 3101 and TCP 443 to outbound initiated bidirectional communication to our BES server from specific IP addresses as  described on Blackberry kb34193 and kb03735. Nothing have changed in the server itself.  All BB services in the server are up and running. Any ideas?
0
Comment
Question by:reirembar
  • 2
4 Comments
 
LVL 10

Expert Comment

by:ecarbone
ID: 39183287
Are you able to wipe one of the blackberrys, then send a new activation code?
0
 
LVL 8

Accepted Solution

by:
jpgobert earned 500 total points
ID: 39183363
Ok... your Blackberry users don't connect directly to your corporate BES in the way you're thinking... a BES server makes an SRP connection to RIM.  All of the cellular data traffic sent from your Blackberry user's phones routes over the carrier's network and actually goes through RIM.  This is a really simple way of explaining this but this is the overall idea.

With that being said, changing your public IP won't cause your devices not to be able to find you because it is your BES that calls home to RIM, not the other way around.

The most likely issue is that when the IP addresses changed your firewall policies didn't get properly updated and your BES servers aren't making a good SRP connection to RIM.  You can check the connection from the BES server.  You can also register your BES server here:  Blackberry Expert Support Center if you haven't already...

Once you're registered you'll be able to run tests from RIM's side to see if your BES is communicating properly.  If it isn't, you can open a support case with RIM right then and there.

Let me know what you come up with... I've been running BES for years...
0
 

Author Closing Comment

by:reirembar
ID: 39184592
Hi jpgobert,
Even when I know little about BB I knew that all the data goes through RIM and I did not had an explanation for the problem since nothing was changed in the BES (neither Exchange) other than the traffic being blocked in the firewall. However, I looked for the ip address for the SRP connection (216.9.242.33 and 68.171.242.33) and opened those holes in the firewall on TCP 3101. The problem did not go away. I even opened TCP 443 port for traffic coming from specific ip addresses that belong to blackberry and the situation did not change.
After I read your comment I opened Blackberry Server Configuration/Blackberry Router and I tested network connection just to check the IP address that the server was trying to connect to. It happened to be different to the ones that I opened holes for (206.51.26.33 and 204.187.87.33). I opened port TCP 3101 for those address as well and the email started to flow. I wonder whether I should go back now and close some of the holes that I opened but the users are getting the email now. What do you think? Thanks for your help.
0
 
LVL 8

Expert Comment

by:jpgobert
ID: 39186052
Glad you got that worked out!!

I don't know what make/model firewall you use but you should consider setting up your rules based on the DNS name srp.us.blackberry.com.  That way you won't have to worry about changes to IP's over time.

Definitely close any holes you made that aren't needed.  The best practice with firewall policies is to never, ever have anything allowed that isn't absolutely necessary.
0

Featured Post

Backup Your Microsoft Windows Server®

Backup all your Microsoft Windows Server – on-premises, in remote locations, in private and hybrid clouds. Your entire Windows Server will be backed up in one easy step with patented, block-level disk imaging. We achieve RTOs (recovery time objectives) as low as 15 seconds.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This very simple solution applies to a narrow cross-section of the "needs to close" variety. In this case, the full message in Event Viewer was in applog, Event ID 1000: Faulting application iexplore.exe, version 8.0.6001.18702, faulting module …
Technology opened people to different means of presenting information, but PowerPoint remains to be above competition. Know why PPT still works today.
The viewer will learn how to simulate a series of sales calls dependent on a single skill level and learn how to simulate a series of sales calls dependent on two skill levels. Simulating Independent Sales Calls: Enter .75 into cell C2 – “skill leve…
The view will learn how to download and install SIMTOOLS and FORMLIST into Excel, how to use SIMTOOLS to generate a Monte Carlo simulation of 30 sales calls, and how to calculate the conditional probability based on the results of the Monte Carlo …

911 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

19 Experts available now in Live!

Get 1:1 Help Now