BlackBerry Enterprise Server 12 Services (Windows)

Version 1

    This template assesses the status and overall of services and performance of a BlackBerry Enterprise Server 12 installed on Windows machines.


    Prerequisites: WMI access to the target server.
    Credentials: Windows Administrator on the target server.


    Component Monitors:


    Service: Blackberry Core

         Provides authentication and authorization services for BES. Is responsible for scheduling and sending commands, IT policies and profiles to devices, and logging, monitoring, reporting, and managing functions.

     

    Service: Blackberry Affinity Manager:

         Maintains an active SRP connection to the BlackBerry Infrastructure and manages changes in device relationships in a BES domain. The Manager assigns BlackBerry devices to a BES instance, monitors enterprise connectivity for each instance, and moves BlackBerry users if there are issues with enterprise connectivity.

     

    Service: Blackberry Dispatcher

    Provides secure enterprise connectivity for BlackBerry devices. It compresses and encrypts and/or decrypts and decompresses data that travels over the Internet to and from the devices.


    Service: Blackberry Gatekeeping Service

    Adds devices to the Exchange ActiveSync list of devices that are allowed to connect to the mail server. The Service assures that only devices managed by BES12 can access work email and other work information on the device.


    Service: Blackberry MDS Connection Service

    Provides a secure connection between BlackBerry devices and intranet network when the device is not connected to your work Wi-Fi network or using a VPN connection. It also provides enterprise data push services for BlackBerry devices.


    Service: Blackberry Secure Connect Plus

    Provides a secure IP tunnel between work applications on devices and the intranet. One tunnel that supports standard IPv4 (TCP and UDP) data is established for each device through the BlackBerry Infrastructure.


    Service: Blackberry Work Connection Notification Service

    Sends new and changed email and organizer notifications to iOS devices that are using Secure Work Space.


    Service: Blackberry Management Console

    Web-based interface used to complete post-installation configuration settings. View and manage users, devices, policies, profiles, applications, system settings, and move IT policies, profiles, groups, and users to BES12.


    Service: Blackberry Affinity Manager RCP Listener

    The port that the active BlackBerry Affinity Manager listens on for RCP connections from the BlackBerry Dispatcher.


    Service: Blackberry Dispatcher BIPPe Listener

    The port that the BlackBerry Dispatcher listens on for BIPPe connections from the BlackBerry MDS Connection Service.


    Self-Service Portal

    The ports that BES12 Self-Service and the management console listen on for HTTPS connections.


    Management Console

    The ports that BES12 Self-Service and the management console listen on for HTTPS connections.


    Service: Blackberry Affinity Manager REST Listener

    The port that the active BlackBerry Affinity Manager listens on for REST notifications.


    Work Connect Notification Service Listener

                    The secure SSL port that the BlackBerry Work Connect Notification Service listens on.


    Blackberry Core Listener

                    The port that the administration console uses to connect to the BES12 Core.


    Blackberry Secure Connect Listener

    The port that the BES12 Core uses to check the status of BlackBerry Secure Connect Plus.


    Blackberry Internal Communication Listener

    The port that is used for internal communication between the BES12 Core and the management console and BES12 Self-Service.


    Device Management Requests Listener

                    The port that BES12 uses to receive management requests for BlackBerry 10 devices. The connection uses mutual authentication with ECC certificates.


    Blackberry Device Enrollment Requests Listener

    The port that BES12 uses to receive enrollment requests for BlackBerry 10 devices.


    iOS/Android/Windows Phone Device Enrollment Request Receiver

    The port that BES12 uses to receive enrollment requests for iOS, Android, and Windows phone devices.


    iOS/Android/Windows Phone Device Management Requests Receiver

    The port that BES12 uses to receive management requests for iOS, Android, and Windows phone devices. The connection uses mutual authentication with RSA certificates.


    iOS Management Requests Receiver

    An additional port that BES12 uses to receive management requests for iOS devices. The connection uses mutual authentication with RSA certificates.


    Authenticated Connection Status Check Listener

    The port that BES12 uses for authenticated connections to check the status of BES12 instances.


    Blackberry Secure Connect Plus SCEP Requests Receiver

                    The port that the BES12 Core uses to handle SCEP requests for BlackBerry Secure Connect Plus (the BES12 Core acts as the CA).


    Blackberry Gatekeeping Service Listener

                    The secure SSL port that the BlackBerry Gatekeeping Service listens on.


    Blackberry MDS Connection Service Listener

                    The HTTP port that the BlackBerry MDS Connection Service listens on for enterprise push data.


    Blackberry Secure connect Plus Listener

                    The port that BlackBerry Secure Connect Plus uses to listen for signaling requests from the BlackBerry infrastructure.


    Blackberry Web Service Listener

                    The port that applications can use to send data to the BlackBerry Web Services.


    Blackberry Core iOS Email Notification Listener

                    The port that the BES12 Core listens on to route email notification traffic through the BlackBerry infrastructure to the APNs for iOS devices.


    Blackberry Core Migration Listener

                    The port that the BES12 Core listens on for migration requests when you move devices from BES10 to BES12.


    iOS/Android Secure Work Space Listener

                    The port that supports Secure Work Space traffic from iOS and Android devices through the BES12 Core and BlackBerry Infrastructure to connect to work resources.


    Blackberry Router Listener

                    The port that your organization’s TCP proxy server or the BlackBerry Router listens on for data that BES12 sends to the APNs.


    Error and Warning Events: Blackberry MDS Connection Service

                    This monitor returns the number of error and warning events generated by BlackBerry MDS Connection Service. This monitor should be as low as possible. If the returned value is greater than zero, you should investigate the application log for details.


    Portions of this document were compiled from the information found at http://us.blackberry.com/enterprise/products/bes12.html
    Last updated: 12/3/2015