The ports that are opened during the usage of the BlackBerry Enterprise Server User Administration Tool are as follows:

• 137 (NetBIOS)
• 3321 (TCP)
• 11100 (TCP)
• 13843 (TCP)

Bi-directional Ports 11100 and 13843 are documented for the BlackBerry Administration Service:

Administration Guide - BlackBerry Enterprise Server Express for Microsoft Exchange

Note: Ports for Microsoft Exchange, IBM Lotus Domino, and Express are all the same.

Copied below is the information on these ports from the above documentation:

TCP 11100: incoming data connections from, and outgoing data connections to, BlackBerry Enterprise Server components for HA JNDI

TLS 13843: incoming data connections from, and outgoing data connections to, BlackBerry Enterprise Server components for RMI over SSL