Prerequisites: Creating Wi-Fi profiles and VPN profiles

Before you create Wi-Fi and VPN profiles, you must appropriately install, configure, and secure your organization's Wi-Fi network.

If your organization’s environment requires a VPN concentrator, you must also configure a VPN concentrator for VPN access security using IPsec VPN.

To configure firewall settings, perform the following actions:

If your organization use a proxy firewall, configure the proxy server so that it is transparent to users.
Verify that the IP addresses for BlackBerry Business Cloud Services that are relevant to your organization’s environment are permitted addresses.
Verify that the Wi-Fi network can connect to BlackBerry Business Cloud Services.
Verify that you add the IP address of BlackBerry Business Cloud Services to the DNS server.

To configure access to the DHCP server and DNS server, you must perform the following actions:

If necessary, configure your organization’s enterprise Wi-Fi network to access the DHCP server.
If you do not use static IT addresses, use the DNS lookup tool on a Wi-Fi enabled BlackBerry device to verify that the device can access the DHCP server.
Use the DNS lookup tool on a Wi-Fi enabled device to verify that the device can access one or more DNS servers.

To configure user accounts in your organization's environment, perform the following actions:

Create authentication credentials for the user accounts.
If your organization uses EAP-TLS, EAP-TTLS, or PEAP authentication methods, permit BlackBerry Business Cloud Services to access to the PKI infrastructure and certificates.

To permit or restrict access to a specific enterprise Wi-Fi network, do one of the following:

Add the MAC addresses of every permitted device on a specific enterprise Wi-Fi network to an allowed list for the controller for each access point.
Add the MAC addresses of every device that is not permitted on a specific enterprise Wi-Fi network to a restricted list list for the controller for each access point.