[coops4284]

Hello,

I am very new to being a BES admin. We are running BES 4.0 and I am trying to figure out how to disable the hand-helds firewall because I am trying to put a third party app on a specific users device that cannot be pushed through the BES. I have looked in the IT policy and we are using the default and didnt see a check box to disable the firewall. Any help would be appreciated

[hdawg]

You're trying to push an app to the BlackBerry not through the BES? ... disabling the handheld firewall wouldn't allow you to do this.

[coops4284]

What we are trying to do is to download the file via the BB browser. The vendor does not have a version of the software that can be pushed via BES. I have checked our IT policy and we allow Third party applications, however when I click download on the link the BB sits there and then times out with a 907 error Network error has occurred. That is why I was thinking it may be a firewall issue. Any thoughts or help would be appreciated.

[hdawg]

Let me google that for you

[JoAnneK]

Within the past month I have been experiencing problems with a third party application (Bloomberg) installed on the Bold and 8800 Blackberry. Without even attempting to use the application, an error message will display multiple times no matter what you are doing. This makes it irritating to do anything on the Blackberry to the point where I have had to remove this application from our users (7 of them) Blackberries. The error message on the Blackberry states:

"The application com_bloomberg_launcher has attempted to open a connection to a location inside the firewall and outside the firewall which is not allowed by your IT policy."

I am the BES Administrator and am running BES 4.0. We are using the same default policy that I have been using since the BES server was installed on this hardware (about 1 1/2 years). The policy is blank (nothing checked).

I spoke with the vendor (Bloomberg) about this issue. They claim other clients are not having this issue and are adamant that it is a firewall issue in our BES IT policy.

I spoke with our Blackberry service provider (Rogers Wireless) and they say it must be related to our BES IT policy however they do not have expertise in BES server administration issues. They did suggest that I create a new blank IT policy and push that to the users. I created a new policy and saved it without checking any boxes and added one of my troubled users to the new policy. It was updated on his handheld however the problem still persisted.

I looked through the default IT policy and noticed two options that may relate to the error message:
"Allow External Connections" and "Allow Internal Connections".
Although the implicit rule is supposed to be set to "True", I went ahead and selected them and set them explicitly to "True". I then added my user back to the default policy and his handheld was updated successfully.

Alas, I still cannot run the application without receiving the same error message. I did reboot the handhelds after every attempt above just to make sure changes were activated. I did attempt to uninstall and reinstall the application several times throughout the process as well and reset the security prompts and ok'd all requests by the application.

The firewall on the handhelds is enable and it will not allow me to disable it. I do not see any options in the IT policy or anywhere else in the Blackberry Manager to allow the Firewall to be disabled. The suggestions I have seen regarding this have been to resend a blank policy which I have done as described above. The BES Server Administration Guide for version 4.0.0 does not seem to have any specific reference to the firewall either.

I would really appreciate any help in this matter.

Thank you in advance.

[MarshBklyn]

it may not even be the policy on the device. check the mds connection settings. if you have your BES going through your proxy and its prompting for credentials before browsing, its possible that the bloomberg app is trying to connect without authentication and thus giving you these messages.
Or, im completely wrong and have no idea what im saying.

[JoAnneK]

Originally Posted by MarshBklyn

it may not even be the policy on the device. check the mds connection settings. if you have your BES going through your proxy and its prompting for credentials before browsing, its possible that the bloomberg app is trying to connect without authentication and thus giving you these messages.
Or, im completely wrong and have no idea what im saying.

I'm not using a proxy. No roles are configured. Nothing is checked on the HTTP tab. Nothing checked on the TLS/HTTPS tab either. I have managed to get a user logged into the Bloomberg application a couple of days ago but then he will start getting spammed with firewall messages again at some point.

[JoAnneK]

Originally Posted by JoAnneK

Within the past month I have been experiencing problems with a third party application (Bloomberg) installed on the Bold and 8800 Blackberry. Without even attempting to use the application, an error message will display multiple times no matter what you are doing. This makes it irritating to do anything on the Blackberry to the point where I have had to remove this application from our users (7 of them) Blackberries. The error message on the Blackberry states:

"The application com_bloomberg_launcher has attempted to open a connection to a location inside the firewall and outside the firewall which is not allowed by your IT policy."

I am the BES Administrator and am running BES 4.0. We are using the same default policy that I have been using since the BES server was installed on this hardware (about 1 1/2 years). The policy is blank (nothing checked).

I spoke with the vendor (Bloomberg) about this issue. They claim other clients are not having this issue and are adamant that it is a firewall issue in our BES IT policy.

I spoke with our Blackberry service provider (Rogers Wireless) and they say it must be related to our BES IT policy however they do not have expertise in BES server administration issues. They did suggest that I create a new blank IT policy and push that to the users. I created a new policy and saved it without checking any boxes and added one of my troubled users to the new policy. It was updated on his handheld however the problem still persisted.

I looked through the default IT policy and noticed two options that may relate to the error message:
"Allow External Connections" and "Allow Internal Connections".
Although the implicit rule is supposed to be set to "True", I went ahead and selected them and set them explicitly to "True". I then added my user back to the default policy and his handheld was updated successfully.

Alas, I still cannot run the application without receiving the same error message. I did reboot the handhelds after every attempt above just to make sure changes were activated. I did attempt to uninstall and reinstall the application several times throughout the process as well and reset the security prompts and ok'd all requests by the application.

The firewall on the handhelds is enable and it will not allow me to disable it. I do not see any options in the IT policy or anywhere else in the Blackberry Manager to allow the Firewall to be disabled. The suggestions I have seen regarding this have been to resend a blank policy which I have done as described above. The BES Server Administration Guide for version 4.0.0 does not seem to have any specific reference to the firewall either.

I would really appreciate any help in this matter.

Thank you in advance.

Just wanted to update this post. Setting the "Allow Split-Pipe Connections" to true (it was implicitly set to False) in the Default IT policy fixed the problem. In some cases I had to reset the firewall prompts for the application and reboot the handheld for it to take affect.