Skip Navigation
  1. BlackBerry Docs
  2. BlackBerry UEM 12.13
  3. Planning and Architecture
  4. BlackBerry UEM and BEMS Planning Guide
  5. Port requirements
  6. Configuring ports
  7. Outbound connections: Devices on a work Wi-Fi network

Outbound connections: Devices on a work 
Wi-Fi
 network

BlackBerry 10
, 
iOS
, 
Android
, and 
Windows
 devices that use your work 
Wi-Fi
 network use the following outbound ports to connect to the 
BlackBerry Infrastructure
 and external services. Configure your organization's firewall to allow outbound two-way connections over these ports.
From
To
Purpose
Protocol
Port
BlackBerry 10
BlackBerry Infrastructure
To connect to *.rdns.blackberry.net and primary DNS host iceberg.blackberry.com if "Use cloud services to find more info about the contacts that you add to the Contacts app" is enabled in the Contacts settings.
  1. HTTP CONNECT to 
    BlackBerry Infrastructure
    ; creates tunnel from device to 
    BlackBerry UEM
     outbound to 
    BlackBerry Infrastructure
  2. TLS session between device and 
    BlackBerry UEM
443
BlackBerry 10
iOS
Android
Windows
 devices
BlackBerry Infrastructure
To connect to the 
<region>
.bbsecure.com subdomain when activating the device.
  1. HTTP CONNECT to 
    BlackBerry Infrastructure
    ; creates tunnel from device to 
    BlackBerry UEM
  2. TLS session between device and 
    BlackBerry UEM
443
BlackBerry 10
Android
BlackBerry Infrastructure
To connect to the 
<region>
.bbsecure.com subdomain so that administration commands can be applied to the devices.
  1. HTTP CONNECT to 
    BlackBerry Infrastructure
    ; creates tunnel from device to 
    BlackBerry UEM
  2. TLS session between device and 
    BlackBerry UEM
443
iOS
BlackBerry Infrastructure
To connect to the 
<region>
.bbsecure.com subdomain so that administration commands can be applied to the devices.
TLS
443
Windows
 devices
BlackBerry Infrastructure
To connect to the 
<region>
.bbsecure.com subdomain so that administration commands can be applied to the devices.
HTTPS; includes TLS handshake using SNI
443
iOS
APNs
To connect to gateway.push.apple.com to receive notifications from APNs.
TCP
5223
Android
FCM
To connect to android.apis.google.com (ports 5228 and 5229) and android.googleapis.com (port 5230) to receive notifications from FCM.
TCP
5228
5229
5230
Devices with 
BlackBerry Dynamics
 apps require outbound connections over the following ports:
  • bxcheckin.good.com:443
  • gdentgw.good.com:443 
  • gdmdc.good.com:49152
  • gdmdc.good.com:443
  • gdrelay.good.com:15000
  • gdrelay.good.com:443
  • gdweb.good.com:443 

CylancePROTECT

Some 
CylancePROTECT
 features require a secure, direct connection from devices to the 
CylanceINFINITY
 cloud service. If devices are connected to your organization's Wi-Fi network, your network configuration must allow connections to 
score.cylance.com:443
.

BlackBerry Analytics

Your organization's firewall must allow outbound communication on port 443 to 
*.analytics.blackberry.com
. If you want to open the firewall to specific hostnames or IP addresses:
  • analytics.blackberry.com, 74.82.73.148 
  • receiver.analytics.blackberry.com, 74.82.73.149 
Some 
CylancePROTECT
 features require a secure, direct connection from devices to the 
CylanceINFINITY
 cloud service. If devices are connected to your organization's Wi-Fi network, your network configuration must allow connections to 
score.cylance.com:443
.