Blackberry S-MIME SUPPORT PACKAGE VERSION 4.1 - Guida di Installazione Scaricare il pdf (Pagina 32)

BlackBerry Enterprise Solution Security

Protecting the BlackBerry Infrastructure connections 32

TCP/IP connection

The TCP/IP connection from the BlackBerry Enterprise Server to the BlackBerry Router is designed to be secure

in the following ways:

Security measure Description

The BlackBerry Enterprise

Server sends outbound traffic

to the BlackBerry device only

through the authenticated

connection to the BlackBerry

Infrastructure.

• You must configure your corporate firewall or proxy to permit the

BlackBerry Enterprise Server to initiate and maintain an outbound

connection to the BlackBerry Infrastructure on TCP port 3101.

The BlackBerry Enterprise

Server does not send inbound-

initiated traffic to the

messaging server.

• The BlackBerry Enterprise Server discards inbound traffic from any

source other than the BlackBerry device (through the BlackBerry

Infrastructure or BlackBerry Desktop Software) or the messaging

server.

The BlackBerry Enterprise

Solution encrypts data traffic

over TCP/IP.

• Data remains encrypted with BlackBerry standard encryption from the

BlackBerry Enterprise Server to the BlackBerry device or from the

BlackBerry device to the BlackBerry Enterprise Server. There is no

intermediate point at which the data is decrypted and encrypted

again.

• No data traffic of any kind can occur between the BlackBerry

Enterprise Server and the wireless network or the BlackBerry device

unless the BlackBerry Enterprise Server can decrypt the data using the

correct, valid master encryption key. Only the BlackBerry device and

BlackBerry Enterprise Server have the correct, valid master encryption

key.

The BlackBerry Enterprise

Server encrypts data traffic

between specific components

• The BlackBerry Enterprise Server encrypts data traffic between

specific components. The BlackBerry Collaboration Service, the

connection service, the BlackBerry Policy Service, and the BlackBerry

Synchronization Service share a secure communication password that

is known only to them. The BlackBerry Messaging Agent and the

BlackBerry Dispatcher share a different secure communication

password that is known only to them. When one of these components

initiates a connection to the BlackBerry Dispatcher, the BlackBerry

inter-process protocol uses SPEKE to bootstrap from the component's

secure communication password and establishes a 256-bit AES

encryption key (a session key). The BlackBerry Enterprise Server then

uses the session key to encrypt data traffic to any components that

store the same secure communication password.

The BlackBerry device initiates

inbound connections using the

BlackBerry Router to a WLAN

only.

• The BlackBerry Router sends the Internet or intranet content requests

from the BlackBerry device over port 4101 to the WLAN. The BlackBerry

Router verifies that the PIN belongs to a valid BlackBerry device that is

registered on the wireless network.

www.blackberry.com

1 2 ... 27 28 29 30 31 32 33 34 35 36 37 ... 51 52

Commenti su questo manuale

Nessun commento

Blackberry S-MIME SUPPORT PACKAGE VERSION 4.1 - Guida di Installazione Pagina 32

Commenti su questo manuale

Prodotti e manuali riguardandi Software Blackberry S-MIME SUPPORT PACKAGE VERSION 4.1 -