1.9 Network Configuration
Your company policy might dictate how you deploy GroupWise Mobile Server within your network configuration. Several configuration options are available. Novell supports either of the following configurations:
-
If your company does not have a demilitarized zone (DMZ) or a screened subnet, you can install GroupWise Mobile Server as a standalone system.
-
If your company uses a DMZ or a screened subnet, you should use the Secure Gateway between your DMZ or screened subnet and your GroupWise Mobile Server machine.
Follow the configuration instructions for your environment:
1.9.1 Network Configuration without the Secure Gateway
If you choose to install GroupWise Mobile Server without the Secure Gateway, communication between devices and GroupWise Mobile Server is a direct connection.
The following illustration depicts a typical network configuration without the Secure Gateway:
Figure 1-1 Network Configuration without the Secure Gateway
1.9.2 Network Configuration with the Secure Gateway in Your DMZ
Novell recommends using the Secure Gateway configuration within your network. The Secure Gateway offers secure and scalable communications between mobile devices and servers. It consists of an HTTP listener and communications services.
The Secure Gateway intercepts the HTTP requests from mobile devices to the GroupWise Mobile Server machine and can route the requests in three ways:
-
Synchronization requests through ports 80 (non-secure HTTP) and 443 (secure HTTPS)
-
Web requests through ports 80 (non-secure HTTP) and 443 (secure HTTPS)
-
Push requests through TCP/IP port 3102
Figure 1-2 Network Configuration with the Secure Gateway
Port 8865 must be open through your internal firewall so that GroupWise Mobile Server can receive Push notifications from the POA.
For information on how to install and configure the Secure Gateway, see the Intellisync Mobile Suite Secure Gateway Administrator’s Guide on the GroupWise Mobility Web site.