 Description: Segmented network architecture
Using a firewall, you can separate a network or LAN into multiple components to create segmented network architecture. The firewall blocks data that is not destined for a particular segment, and might block all protocol ports except those that that segment specifically requires. Thus each segment contains filtered and isolated network traffic, which might improve the security and performance of the network. A particular department or a specific group of servers in your organization can use a segment of the corporate LAN while a bridge, router, or switch separates that segment from the rest of the corporate LAN.
If your corporate security policies enforce the use of segmented network architecture, you can place the BlackBerry® Enterprise Solution components in network segments.
Protecting BlackBerry components
The port connections to all BlackBerry components are authenticated over a TCP/IP or UDP/IP connection using Secure Sockets Layer (SSL) or Transport Layer Security (TLS).
The BlackBerry Enterprise Server encrypts data between specific BlackBerry components that share a secure communication password that is known only to them. When one of these components initiates a connection to the BlackBerry Dispatcher, a Research In Motion (RIM) proprietary protocol establishes an encryption key, and the BlackBerry Enterprise Server uses that key to encrypt data that is transmitted to any components that store the same secure communication password. See the BlackBerry Enterprise Solution Version 4.1 Security Technical Overview for more information about how the BlackBerry Enterprise Solution encrypts data.
Some organizations require that the BlackBerry components be placed in a segmented network to help prevent the spread of potential attacks from one BlackBerry component installed on a remote computer to another computer within the corporate LAN. Segmented network architecture is designed to isolate attacks and contains them on one computer. When each BlackBerry component resides in its own network segment, you make remote communications possible by opening only the port connections that the BlackBerry components use.
To place the BlackBerry Enterprise Solution in network segments, you must install each component on a remote computer and then place each component in its own network segment.
|
Visit Placing the BlackBerry Enterprise Solution in a segmented network `s Website
Refer
Report This Link
Write a Review!
3 (out of 5)
