That's how I did it. It works great. I blocked the RIM IP addresses from inbound access to my OWA server on port 80 & 443.
[cid:[email protected]] RIM IP range [cid:[email protected]] I'll have to check the link to see if there are any new ones, but these have been pretty solid for a while. Darhl Thomason | SysAdmin | Business Technology Papa Murphy's Int'l. | d 360-449-4044 | c 360-607-5617 | www.papamurphys.com -----Original Message----- From: [email protected] [mailto:[email protected]] On Behalf Of Peterson David Sent: Tuesday, June 21, 2011 1:19 PM To: A list for BES Admin's to discuss issues, etc. Subject: Re: [Bes-admins] Blocking BIS access to our Exchange I believe all you need to do is block RIM's servers on your firewall from inbound initiated. The IPs are the same as for BES I believe, but since BES is outbound initiated only, blocking inbound initiated won't affect BES. These are the addresses: http://btsc.webapps.blackberry.com/btsc/search.do?cmd=displayKC&docType=kc&externalId=KB11036&sliceId=SAL_Public&dialogID=69199896&stateId=0%200%2069201325 -----Original Message----- From: [email protected] [mailto:[email protected]] On Behalf Of Art Alexion Sent: Tuesday, June 21, 2011 4:15 PM To: BES List Subject: [Bes-admins] Blocking BIS access to our Exchange I have Googled this with minimal luck. We have some users who are accessing their corporate mail via BIS. Though we freely provide BES accounts, I suspect these are users with personal devices who don't want to pay for an Enterprise Data Plan. Pretty ironic that we are having this problem with BlackBerries, incidentally, because with the other smartphones I can just boot them from EAS. My understanding is that BIS uses OWA for Exchange access. Of course, we can't turn of OWA or Outlook Anywhere. I also read that I can accomplish this by blocking the BIS IP range in our firewall. Other posts say you have to do it on the IIS server for OWA. None of the posts, however seem to want to give up the IP range to be blocked. Anyone successful at this? How? -- Art Alexion Systems Engineer -- Infrastructure Engineering Group Resources for Human Development [cid:250E70F0-B191-4D90-8033-DD47AEDCAFAD] NOTICE: This electronic mail transmission from the law firm of Dinsmore & Shohl may constitute an attorney-client communication that is privileged at law. It is not intended for transmission to, or receipt by, any unauthorized persons. If you have received this electronic mail transmission in error, please delete it from your system without copying it, and notify the sender by reply e-mail, so that our address record can be corrected. _______________________________________________ Bes-Admins mailing list [email protected] http://www.dataoutages.com/mailman/listinfo/bes-admins http://www.dataoutages.com http://www.dataoutagenews.com RSS Feed: http://feeds.feedburner.com/Bes-admins --------------------------------- Bes-Admins mailing list is sponsored by Dataoutagenews.com. http://www.dataoutagenews.com ------------------------------------------------------------------------------------ Join the TAKE 'N' BAKE REVOLUTION! www.facebook.com/papamurphyspizza<http://www.facebook.com/papamurphyspizza> "#1 Rated Pizza Chain" - ZAGAT 2010 National Restaurant Chains Survey (r)
<<inline: image001.png>>
<<inline: image002.png>>
_______________________________________________ Bes-Admins mailing list [email protected] http://www.dataoutages.com/mailman/listinfo/bes-admins http://www.dataoutages.com http://www.dataoutagenews.com RSS Feed: http://feeds.feedburner.com/Bes-admins --------------------------------- Bes-Admins mailing list is sponsored by Dataoutagenews.com. http://www.dataoutagenews.com
