Restricting access to the Internet with BlackBerry Enterprise Server Express

BrightPoint GB

BrightPoint GB

Device Lifecycle Services.

Delivered.

Plan. Market. Customize. Move. Recycle.

More...
Samsung Galaxy S III

Samsung Galaxy S III

Designed For Humans

Inspired By Nature

This sleek and innovative smartphone has the enhanced intelligence to make everyday life easier.

More...
BlackBerry Curve 9320

BlackBerry Curve 9320

Socially Connected

3G capable

Featuring all of the core messaging and social features to keep you connected.

More...
HTC One X

HTC One X

Technology Leader

Quad Core Android 4.0

Perfect for gaming, watching videos and surfing the net

More...
HTC One V

HTC One V

Iconic Design

A great all-rounder

ImageSense technology, Beats Audio, wireless media streaming, cloud storage and more...

More...
ZTE Tania

ZTE Tania

Windows Phone Mango

Fully equipped

Great for business and pleasure

More...
BlackBerry Bold 9790

BlackBerry Bold 9790

BlackBerry OS7

Powerful & Fully Featured

Smooth performance for browsing the web, running apps, working with documents, and enjoying multimedia

More...
HTC Sensation XL

HTC Sensation XL

Feel every beat

With Beats Audio

A multimedia superstar with Beats earphones included.

More...
HTC Titan

HTC Titan

Unlike anything you've ever held before

Office on the move

Windows Phone 7.5 (Mango). With a 4.7-inch screen and big virtual keyboard, the Titan is perfect for both work and play.

More...
HTC Radar

HTC Radar

Real time close

Windows Phone 7.5 (Mango)

Pull all your contacts and social networks together into one place to stay connected with friends and share instantly.

More...
BlackBerry Bold 9900

BlackBerry Bold 9900

Slim yet powerful

Touch and Type in harmony

The Bold 9900 is RIM's thinnest BlackBerry smartphone yet and as lightweight and durable as it is feature-packed.

More...
ZTE Libra

ZTE Libra

Affordable Android

WiFi hotspot, Exchange email, Google Maps and much, much more all at an attractive price.

More...
ZTE MF30/MF60

ZTE MF30/MF60

Portable Internet

USB & WiFi for Windows and Mac

High speed, portable Internet access in your pocket.

More...
Motorola Defy +

Motorola Defy +

Lifeproof

Faster, smarter, richer

Scratch, dust and water-resistant. 1GHz processor, 5MP camera and great pre-loaded apps.

More...
BlackBerry Curve 9380

BlackBerry Curve 9380

BlackBerry OS7

The 1st all-touch Curve

Easily capture and share your favourite moments with family, friends and colleagues.

More...
Samsung Galaxy S2

Samsung Galaxy S2

Faster. Slimmer. Brighter.

Prepare yourself for the Galaxy S II, Samsung's thinnest smartphone.

More...
HTC Sensation XE

HTC Sensation XE

With Beats Audio

Designed to impress

With custom Beats headphones, engineered to deliver extraordinary sound.

More...
ZTE Skate

ZTE Skate

Affordable Android

WiFi hotspot, Exchange email, Google Maps and much, much more all at an attractive price.

More...
HTC Explorer

HTC Explorer

A design that fits your lifestyle

Keep in touch with the people who matter

Jump right into what's most important to you thanks to an improved lockscreen design.

More...
ZTE Tureis

ZTE Tureis

Full Qwerty 2.6-inch touchscreen

Android Gingerbread

Business and social features in a slim package.

More...
Frontpage Slideshow (standalone) | Copyright © 2006-2011 JoomlaWorks Ltd.

Restricting access to the Internet with BlackBerry Enterprise Server Express

There are two ways in which web browsing from activated BlackBerry devices can be restricted:

  • Implementation of a firewall or web proxy between the BES Express server and the Internet
  • Usage of Pull Authorisation rules on the BES Express server

Firewall or web proxy deployment

As with the full BES solution, all web browsing from BlackBerry devices using the BlackBerry Browser is routed “through” the BES Express server once devices have been activated. Therefore any browsing restrictions that are applied to the BES Express server, either by a firewall or a proxy server, are automatically applied to all BlackBerry devices registered with it. Therefore it is a relatively straightforward process to restrict web browsing on user devices if an existing proxy or firewall is deployed already. If a proxy or firewall is deployed for user desktop machines, it is recommended to use this infrastructure for the BES Express server also to provide a single point of configuration and ensure consistency:

Restricting access to the Internet with BlackBerry Enterprise Server Express

Proxy authentication can be defined in the Mobile Data Service (MDS) on the BES Express server:

Restricting access to the Internet with BlackBerry Enterprise Server Express



Pull Authorisation Rules

Because all web browsing from client devices passes through the BES Express server, it is possible to create “allow” and “deny” rules, on a per user or per group basis, on the BES Express server itself.
To enable this feature on the BES Express server, within the Administration Console open the properties of the Mobile Data Service (MDS) instance and enable Pull Authorisation:

Restricting access to the Internet with BlackBerry Enterprise Server Express

As soon as this feature is enabled, all web sites are now explicitly blocked on client devices:

Restricting access to the Internet with BlackBerry Enterprise Server Express

To enable specific web sites, you must create a “Pull URL Pattern”. Multiple patterns can be defined and patterns can include wildcards:

Restricting access to the Internet with BlackBerry Enterprise Server Express

Once defined, the URL must be assigned to an “Access Control Rule”, with an “allow” or “deny” action assigned to it:

Restricting access to the Internet with BlackBerry Enterprise Server Express

Multiple rules can be created.
Once the Access Control Rule has been created, it must then be assigned to all target users within the properties of their user account on the BES Express server:

Restricting access to the Internet with BlackBerry Enterprise Server Express

And the Mobile Data Service instance should then be restarted:

Restricting access to the Internet with BlackBerry Enterprise Server Express

The new browsing policy will now be applied to all subscribed users.

Full details on this procedure is available on the BlackBerry Technical Support web site - http://btsc.webapps.blackberry.com/btsc/search.do?cmd=displayKC&docType=...