Network Ports Configuration for Enhanced Security Model with Local Communication Server Parent topic

If you are using the enhanced security model (dual server installation) with Local Communication Server, configure the following network ports for Mobile Security components:
Component
Network Ports
Details
Management Server
Open HTTPS port 443.
Note
Note
This is the default HTTP port number. If want to change the HTTPS port number that you want to use for Management Server, see Configuring Management Server Settings for the details.
Used for accessing the Mobile Security administration Web console.
Communication Server
Open HTTP port 8080.
Note
Note
This is the default HTTP port number for the dual server configuration. If you want to change the HTTP port number that you want to use for mobile devices to communicate with the Communication Server during the installation, see Configuring Common Communication Server Settings for the details.
Used for communication between mobile devices and the Communication Server.
Open HTTPS port 4343.
Note
Note
This is the default HTTPS port number for the dual server configuration.
Used for secure communication between mobile devices and the Communication Server.
Open TCP port 2195 for Apple Push Notification service (APNs) server. The hostname of Apple Push Notification Service is gateway.push.apple.com.
Enables Apple’s APNs server to manage iOS mobile devices.
If you are not using APNs server to manage iOS mobile devices, this port is not required.
Open the TCP port 4343. This is the default port to allow inbound connection to Communication Server from Management Server. If you want to change the HTTP port number that you want to use for mobile devices to communicate with the Communication Server during the installation, see Configuring Common Communication Server Settings for the details.
Establishes a connection between the Management Server and the Communication Server.
Active Directory
Open one of the following ports:
  • TCP port 389 (Domain Controller) for Management Server
  • TCP port 3268 (Global Category) for Management Server
Used for user authentication using Active Directory.
If you are not using Active Directory to authenticate or import users, this port is not required.
Simple Certificate Enrollment Protocol (SCEP) Server
Open HTTP port 80 for Communication Server and iOS mobile devices.
Used for iOS mobile devices enrollment.
If you are not using SCEP server to manage iOS mobile devices, this port is not required.
SQL Server
Open the following ports:
  • TCP port 1433 for Management Server
  • UDP port 1434 for Management Server
Note
Note
TCP port 1433 is the default port to connect to the SQL Server. However, you can also use a different TCP port for SQL server, if required.
Establishes a connection between the Communication Server and the Management Server with the remote SQL server.
BlackBerry Enterprise Server (BES)
Open the following ports:
  • Open TCP port 3101 for BES Server Routing Protocol (SRP) Infrastructure.
  • Open TCP port 443 for Management Server and BES command tool
If you are not using Mobile Security to manage BlackBerry mobile devices, these port are not required.