Recently I’ve deployed some Blackberry Enterprise Server, this link is useful for firewalls policy deploy http://www.blackberry.com/btsc/KB11036