Specifications

Controlling app connections
The BlackBerry Device Service controls how apps on work space only devices connect to your organization’s network.
Because work space only devices are entirely controlled by your organization, all apps and data on these devices are
considered work apps and work data. You can use IT policy rules to control the type of connections that work apps use to
connect to your organization’s network.
Work apps can access your organization’s network using a number of communication methods. Based on the settings of IT
policy rules, certain connections are available to apps on work space only devices. These connections are prioritized, and
apps usually use the default route.
The "Network Access Control for Work Apps" and "Work Data Uses Only Work Network" IT policy rules control what
connections are available to apps on work space only devices:
• The "Network Access Control for Work Apps" IT policy rule controls whether work apps on a device must connect to
your organization’s network through the BlackBerry Device Service.
• The "Work Data Uses Only Work Network" IT policy rule controls whether a device must route work traffic through a
work VPN or work Wi-Fi connection and can't go through the BlackBerry Infrastructure.
If the "Network Access Control for Work Apps" IT policy rule is set to No, work apps attempt to connect to your
organization's network using the following communication methods, in order:
1. Work VPN profiles over a Wi-Fi network
2. Work VPN profiles over a mobile network
3. Work Wi-Fi profiles
4. BlackBerry Infrastructure over a Wi-Fi network
5. BlackBerry Infrastructure over a mobile network
However, if the "Work Data Uses Only Work Network" IT policy rule is set to Yes, devices can't make any BlackBerry
Infrastructure connections.
Security Technical Overview Securing work space only devices
80