Administration Guide

Managing how users access enterprise applications and web content

5.In the Control type drop-down list, click Pull.

6.Click the Add icon.

7.Click Save all.

After you finish: Restrict or permit web address patterns using a pull rule.

Restrict or permit web addresses and Intranet addresses using a pull rule

Before you begin:

Create a pull rule.

If you want BlackBerry device users to use RSA authentication to access web servers, configure the BlackBerry MDS Connection Service to authenticate BlackBerry devices to the RSA Authentication Manager.

If you want users to use integrated Windows authentication when they access the web servers, configure the BlackBerry MDS Connection Service to authenticate devices to Microsoft Active Directory.

A web site that uses DNS load balancing returns a single IP address to the BlackBerry MDS Connection Service but might use multiple IP addresses to provide access to the web site. As a result, the BlackBerry MDS Connection Service might not be able to restrict BlackBerry devices from accessing the web site.

1.In the BlackBerry Administration Service, on the Servers and components menu, expand BlackBerry Solution topology > BlackBerry Domain > Component view.

2.Click MDS Connection Service.

3.Click Edit component.

4.On the Access control rules tab, click the Edit icon for a pull rule.

5.In the URL pattern group drop-down list, click the protocol for the address that you want to assign to the pull rule.

6.In the URL pattern drop-down list, click the address that you want to assign to the pull rule.

7.In the Allowed drop-down list, perform one of the following actions:

To prevent users from accessing web servers that match the address, click Deny.

To permit users to access web servers that match a specific address, click Allow.

8.If necessary, in the Authentication drop-down list, perform one of the following actions:

To require that a user enter authentication credentials to access content on a web site, click Access control rules only. The device user is not prompted to enter authentication credentials if they are not required by the web site.

To require that the BlackBerry MDS Connection Service authenticates a user using integrated Windows authentication, click Integrated.

310

Page 310
Image 310
Blackberry SWD-20120924140022907 manual Control type drop-down list, click Pull Click the Add icon, Before you begin