5. In the Control type drop-down list, click Pull.
6. Click the Add icon.
7. Click Save all.
After you finish: Restrict or permit web address patterns using a pull rule.
Restrict or permit web addresses and Intranetaddresses using a pull rule
Before you begin:
• Create a pull rule.
• If you want BlackBerry device users to use RSA authentication to access web servers, configure the BlackBerry MDS
Connection Service to authenticate BlackBerry devices to the RSA Authentication Manager.
• If you want users to use integrated Windows authentication when they access the web servers, configure the
BlackBerry MDS Connection Service to authenticate devices to Microsoft Active Directory.
A web site that uses DNS load balancing returns a single IP address to the BlackBerry MDS Connection Service but might
use multiple IP addresses to provide access to the web site. As a result, the BlackBerry MDS Connection Service might not
be able to restrict BlackBerry devices from accessing the web site.
1. In the BlackBerry Administration Service, on the Servers and components menu, expand BlackBerry Solution
topology > BlackBerry Domain > Component view.
2. Click MDS Connection Service.
3. Click Edit component.
4. On the Access control rules tab, click the Edit icon for a pull rule.
5. In the URL pattern group drop-down list, click the protocol for the address that you want to assign to the pull rule.
6. In the URL pattern drop-down list, click the address that you want to assign to the pull rule.
7. In the Allowed drop-down list, perform one of the following actions:
• To prevent users from accessing web servers that match the address, click Deny.
• To permit users to access web servers that match a specific address, click Allow.
8. If necessary, in the Authentication drop-down list, perform one of the following actions:
• To require that a user enter authentication credentials to access content on a web site, click Access control rules
only. The device user is not prompted to enter authentication credentials if they are not required by the web site.
• To require that the BlackBerry MDS Connection Service authenticates a user using integrated Windows
authentication, click Integrated.
Administration Guide Managing how users access enterprise applications and web content
310