Configure the BlackBerry Secure Connect Service to connect to the BlackBerry Infrastructure through a TCP proxy server

In the Administration Console, on the menu bar, click Settings.
In the left pane, click Secure Connect Service.
Select the Enable TCP proxy check box.
In the Server name or IP address field, type the FQDN or IP address of the TCP proxy server.
In the Port number field, type the port number to use for the TCP proxy server.
Click Save.

After you finish:

In the Windows Services, restart the BES10 – BlackBerry Secure Connect Service.
Configure your organization's firewall to communicate with the BlackBerry Infrastructure over port 3101 to the domain <country_code>.bbsecure.com, where <country_code> is the appropriate country code defined by the ISO Standard. For more information about domains and IP addresses to use in your firewall configuration, visit www.blackberry.com/go/kbhelp to read article KB34193.