[ajalil]

Hi

If I place the BES router in the DMZ and the BES server on the internal LAN then what ports do I need to open on the firewalls for the BES server to talk to the Router AND the router to talk to blackberry servers on the internet.

Thanks

[bradhs]

Check out: Livelink - Redirection

and

Livelink - Redirection

Both of these article will help you find what you need...

By the way, why stick the router in DMZ? Are you worried about something?

[ajalil]

Hi

Thanks for the reply but the mentioned article doesn't tell me which ports to open. The reason for putting the router in the DMZ is because its one of the best practices.

[MarkV]

Originally Posted by ajalil

Hi

Thanks for the reply but the mentioned article doesn't tell me which ports to open. The reason for putting the router in the DMZ is because its one of the best practices.

Port 3101 from the internal BES to the DMZ router. You can change this port in the registry of the router server.

But searching the support part of the blackberry.com site isn't that hard is it? First hit searching on 'router' and 'dmz' will link you to this document: Livelink - Redirection

And this one stated very clearly: "outgoing data connection, using SRP, to the BlackBerry Router TCP 3101"

[BBAdmin]

The reason for putting the router in the DMZ is because its one of the best practices.

I don't necessarily agree this is the case. There's nothing wrong with having it all behind the firewall. If you've thought about implementation properly and you've got a decent and tight enough network already, there is no need to segment a BES.