The network requirements for a typical BES implementation are relatively simple. The BES should be installed in a high-speed, switched network environment. The number of hops between the messaging server and the BES should be minimized to ensure optimal performance. The other basic security requirement is that the BES should be able to initiate an outbound TCP connection to the BlackBerry infrastructure on TCP port 3101. This is one of the security features that has made the implementation of BES successful-you only need to open a single port on the firewall for an outbound connection for the solution to work. This minimizes any exploits via a firewall as you are only opening the single port for outbound connections.