BlackBerry® Enterprise Service 10

[ajoykanbil]

Thanks BD!

can i use CAS FQDN as server name? 

[-BD-]

---

ajoykanbil wrote:

Thanks BD!

can i use CAS FQDN as server name? 

---

You can assuming that ActiveSync is installed which it should be by default.

[fermanagh]

Hi,

If you're a serious company (and I mean this in the nicest possible way) then you will want all your corporate data going via the BDS. Not only is there an extra layer of AES 256-bit encryption using MDS-CS but don't forget that the compression is still there!

With regards to activating your BB10 device over the BB Infrastructure, you just need to ensure that the machine where the BAS is installed has access to discoveryservice.blackberry.com on port 443 so you only have to enter the username and password. Otherwise, you'll need to have the SRP address at hand.

Don't forget that you need to create the email profiles too with all the relevant info etc, if you're on Exchange 2010 enter the CAS array address and you're good to go!

[oliwer]

There is no real compression - hopefully they are not breaking the SSL Tunnel between the device and your EAS Server. And if they are not breaking the SSL tunnel they cannot compress encrypted data.

[fermanagh]

That's not exactly true..

Here's an excerpt from the official BB doc:

Content classified as Enterprise data on BlackBerry 10

devices (i.e. work email, attachments, work contacts, calendar

and notes, work browser, and enterprise applications) will

pass through BlackBerry Enterprise Service 10 and will be

compressed. Data that is not classified as work (i.e. personal

browser, personal email and applications) will not pass through

BlackBerry Enterprise Service 10 and will not be compressed.

It is anticipated that the majority of personal data consumption

will not benefit from additional compression due to the nature

of the content (i.e. video streaming, embedded flash content,

music and video downloads, video conferencing, application and

game downloads).

[ajoykanbil]

you mean to say the 9 digit SRP ID: SXXXXXXXX

currenty firewall is blocking discoveryservice.blackberry.com on port 443

[fermanagh]

Yes

Ask your FW team to open the port to that address and also perform a telnet as well, that's the only sure fire way of confirming the access is open!

[-BD-]

---

oliwer wrote:
There is no real compression - hopefully they are not breaking the SSL Tunnel between the device and your EAS Server. And if they are not breaking the SSL tunnel they cannot compress encrypted data.

---

This is true for ActiveSync data.  Assuming you are using SSL you will not get much benefit attempting to compress random (encrypted) data.

[ajoykanbil]

Thanks fermanagh & BD for the help.

This works now!! 

1 question left so the new BDS don’t work the traditional way? and how it work for android and iphone? we need to install some app? and how the encryption will be?

New BES 10 with desktop sharing this is so cool.

[fermanagh]

BDS uses active sync so no more MAPI or nbes if you use Domino...however the https traffic still passes through MDS-CS for a further layer of encryption.

Android and iOS are managed using UDS (Universal Device Service) and I heard that the packets between these devices and the email server will also be routed through the BB infrastructure! I believe it will be a summer release. I don't think the likes of Good Technonoly and Mobile Iron stand a chance against the unified console that BES offers...only time will tell!