[paynet2128]

I run a BES 4.1 Sp server without MDS components. My manager has directed me to create an IT-Policy so one moron user can surf the internet. We do not allow anyone else to surf internally or externally and never have. This solution was designed to allow Phone, E-mail & outlook assiciated calnders...

What is the best way to approach this task? Would you install MDS to allow to allow them to connect to the external T-Mobile Portal???

[hdawg]

If you have BES 4.1 installed you have the basic requirements for MDS ... you just don't have MDS Services (which isn't needed for web browsing).

[paynet2128]

Any ideas for a simple way of configuring it? My Security guys are a bit out of sorts. I have it working but I had to turn on 2 setting that they do not like. They also do not like the fact that the Blackberry devices are not going through our firewall based Proxy service. We restrict certain websites, they want the BB device restricted also.

[hdawg]

enable the browser on the HH through IT Policy and configure the proxy settings on the BES

[paynet2128]

But we do not use a proxy, and the HH are still ble to get out to restricted site as if it is bypassing the our Firewall Proxy piece.

[SoUnCool]

using IT Policy enable only MDS browser on HH and disable internet browser on HH
, this way all browser trraffic will go through BES server and through your corporate firewall, no config required on HH

[fadmin]

That's because not all firewall's/proxies are reckognizing requests from hh browser ( like they do from IE or firefox) and they let it go through...

[hdawg]

Originally Posted by fadmin

That's because not all firewall's/proxies are reckognizing requests from hh browser ( like they do from IE or firefox) and they let it go through...

Huh? the request gets proxied by MDS on the BES.

[paynet2128]

Originally Posted by SoUnCool

using IT Policy enable only MDS browser on HH and disable internet browser on HH
, this way all browser trraffic will go through BES server and through your corporate firewall, no config required on HH

Could tell me what IT-Policy headings these would fall under?

[hdawg]

Originally Posted by paynet2128

Could tell me what IT-Policy headings these would fall under?

Search the Policy Reference Guide for "Allow IBS Browser"

[paynet2128]

I tested using the IBS Browser, but I could not get it to work unless I enabled T-Mobile's browser also. My security folks will not allow the use of T-Mobile browser just the IBS browser. When I remove T-Mobile's Browser I am unable to acces the Internet. Does this make any sense to anyone out there?

[paynet2128]

I think I just had a break through, but please correct me if I am wrong. I have enabled "IBS browser" and disabled "Allow Other Browsers services". From what I am reading this would force my URL request to go through the BES MDS services. Now for the URL request to go through do I need to enable internet service for the BES server through the firewall? My BES server is in side a Firewall and I use a port to go through the Firewall to a DMZ router.

When I try to enter a URL like YouTube - Broadcast Yourself. I receive an error"
HTTP Error 403: Forbidden, you are not authorized to view this page. Please try loading a different page." I receive this error when I try to go to our local web server within our DMZ.

Thanks in advance for all the help on this.

[hdawg]

What is the name of the Browser icon you are using on your HH to access the site?

[paynet2128]

Blackberry Browser, I renamed it NEWS Browser from the IT-Policy. After change the Acess controls I am now able to access Intranet sites. I am waitin go our firewall guy to open up ports 8080 & 8443...

[hdawg]

ok ... the BlackBerry Browser should have nothing to do at all with IBS Browser ... disabling it doesn't prevent the NEWS Browser from working at all.

[paynet2128]

OK. I have turned off IBS and I can still get to my Intranet. But I receive a "HTTP Error 400" when I go to the internet. I went into the Proxy setting and setup a proxy with "http"\\*" & "FQDN:8080 of my firewall proxy". I still get the same response.

Could someone provide me an example of setting up the proxy settings?

[fadmin]

http://.*