Skip to content

BlackBerry BYOIP Integration Overview

BYOIP SUPPORTER
ASN N/A
IPv4 support
IPv6 support
LOA support
ROA support
Process Manual
Locations supported
Other: South Africa, China, India, Indonesia, Japan, Saudi Arabia, Singapore, South Korea, United Arab Emirates
Europe: Albania, Andorra, Austria, Belarus, Belgium, Bosnia and Herzegovina, Bulgaria, Croatia, Czech Republic, Denmark, Estonia, Finland, France, Germany, Greece, Hungary, Iceland, Ireland, Italy, Kosovo, Latvia, Liechtenstein, Lithuania, Luxembourg, Malta, Moldova, Monaco, Montenegro, Netherlands, North Macedonia, Norway, Poland, Portugal, Romania, San Marino, Serbia, Slovakia, Slovenia, Spain, Sweden, Switzerland, Ukraine, United Kingdom, Vatican City, Russia, Canada, Mexico, Panama, United States, Brazil, Australia, New Zealand

Searching for the best IP providers? BlackBerry historically enabled organizations to bring their own IPv4 address ranges via the CylanceGATEWAY platform. Following Arctic Wolf’s acquisition of BlackBerry’s Cylance endpoint security assets and the launch of Aurora Endpoint Security in early 2025, this BYOIP capability is now delivered and documented as part of the Aurora Endpoint Security Gateway. Existing BlackBerry CylanceGATEWAY and Aurora customers can onboard dedicated /24 CIDR ranges to ensure source IP pinning, GeoIP consistency, and secure SaaS access. Below you’ll find the current BYOIP scope, technical requirements, and configuration steps, with links into the Aurora documentation.

Provider Details

FieldInformation
Provider NameBlackBerry (CylanceGATEWAY / Aurora Endpoint Security Gateway)
WebsiteBlackBerry – Intelligent Security. Everywhere.
ASN(s)Not publicly documented; Gateway egress is operated on Arctic Wolf Aurora infrastructure.
Regions SupportedGlobal support via Aurora Endpoint Security Gateway (formerly CylanceGATEWAY), subject to regional service availability.
Support ContactBlackBerry Technical Support Services (legacy CylanceGATEWAY customers)
Arctic Wolf Support (Aurora Endpoint Security Gateway customers)
Tech Article & DateBring your own IP addresses (BYOIP) – Aurora Endpoint Security Gateway – documentation hosted by Arctic Wolf since 2025 (exact publish date not specified)
BYOIP ScopeDedicated IPv4 /24 CIDR ranges are added to the Aurora Endpoint Security Gateway (formerly BlackBerry CylanceGATEWAY) and used as egress IPs. This enables source IP pinning for SaaS applications, aligns GeoIP information with your organization’s address space, and consolidates multiple non-contiguous IP addresses into a single CIDR block. The BYOIP feature is now part of Arctic Wolf’s Aurora Endpoint Security portfolio, which integrates the former Cylance capabilities.
Supported VersionsIPv4 (dedicated /24 CIDR); IPv6 BYOIP not documented.
Supported ServicesAurora Endpoint Security – Gateway (cloud-based secure network access / ZTNA; formerly BlackBerry CylanceGATEWAY).

Technical Requirements

RequirementDetails
Prefix SizeIPv4 CIDR /24 dedicated range required for BYOIP (per Aurora Gateway BYOIP documentation).
ASN Ownership RequiredNot publicly documented; verify with Arctic Wolf / BlackBerry based on your contract and RIR.
IRR or RADb ObjectNot publicly documented; verify with Arctic Wolf Support if any routing policy objects are required.
ROA or LOANot publicly documented; requirements (if any) should be confirmed with Arctic Wolf / BlackBerry during onboarding.
RIR LimitationsNot publicly documented; confirm region- and RIR-specific eligibility with your account team.

Step-by-Step BYOIP Process

  • Submit a Request: Open a support case with BlackBerry or Arctic Wolf (depending on your tenancy) requesting BYOIP enablement for Gateway, and provide your dedicated IPv4 /24 CIDR range plus tenant/account identifiers.
  • Configure Source IP Pinning: After the provider provisions the CIDR to your tenant, configure Gateway policies so that selected applications egress via your dedicated range, enabling source IP pinning and consistent GeoIP behavior.

Cost and Limitations

ItemDetails
FeesNot specified; BYOIP is treated as an advanced configuration of Aurora Endpoint Security Gateway / legacy CylanceGATEWAY licensing.
Bundled or StandaloneUsed with Aurora Endpoint Security Gateway (formerly BlackBerry CylanceGATEWAY); not advertised as a standalone BYOIP product.
Traffic/Peering RestrictionsNot specified.
Other LimitationsNot specified in public documentation; consult your account team for any per-tenant limits.

Automation & Developer Access

  • API Access: Not specified for BYOIP; Gateway configuration is documented primarily as a console- and ticket-driven workflow.
  • Terraform/SDK: Not specified; no public Aurora Gateway BYOIP provider or SDK calls documented at this time.

Abuse & Reputation Management

  • IP Reputation Monitoring: Not specified; customers are responsible for managing the reputation of their BYOIP ranges with downstream partners and reputation services.
  • Blacklist Removal Assistance: Not specified; coordinate with Arctic Wolf / BlackBerry support and relevant reputation providers if issues arise.

Bring your own IP addresses (BYOIP) – Aurora Endpoint Security Gateway (Arctic Wolf)
Arctic Wolf and BlackBerry announce closing of acquisition for Cylance (press release)
Legacy CylanceGATEWAY Data Sheet (BlackBerry)
IPXO BYOIP Overview

FAQ

BYOIP, or Bring Your Own IP, is a service that enables organizations to bring their own public IP addresses—whether owned outright or leased from an IP provider—into a service provider’s network infrastructure. Instead of relying on IP addresses assigned by the provider, BYOIP allows businesses to retain control over their IP resources. This ensures continuity, particularly for organizations with established IP-based reputations, branding, or dependencies on specific address blocks. IP providers can assist in streamlining this process, making it easy to integrate your IPs into the desired network environment.

BYOIP offers several compelling advantages. By using your own IPs, you can maintain continuity in your network’s identity, reduce the risk of disruptions to email deliverability or service recognition, and avoid reputational concerns associated with shared IPs. Additionally, BYOIP provides enhanced flexibility and control over your IP resources.

BYOIP is ideal for organizations that either own public IP addresses or lease them from a trusted IP provider with explicit BYOIP support. This includes enterprises, cloud providers, content delivery networks (CDNs), and businesses with compliance requirements or IP reputation needs. Working with a reputable IP provider ensures that leased IPs can be seamlessly integrated into another provider’s infrastructure without ownership concerns.

You must either legally own the IP addresses or have explicit authorization from a leasing IP provider to route and manage them. IP providers who offer BYOIP-ready IP addresses simplify this process, providing documentation and support to ensure compliance with regional internet registry (RIR) policies and service provider requirements. This collaboration ensures smooth implementation without any legal or operational issues.

To use BYOIP, you’ll typically need to present documentation verifying your authority over the IP block. This can include official records from a regional internet registry (RIR) such as ARIN, RIPE NCC, or APNIC. If you are leasing IPs, the IP provider should supply proof of their ownership and grant you permission for BYOIP. Providers that specialize in IP leasing often handle this paperwork for you, reducing administrative burden and ensuring compliance.

Yes, BYOIP is designed to be a secure and reliable solution. Reputable service providers and IP providers implement robust safeguards to prevent unauthorized use or hijacking of IP addresses. Security measures include BGP filtering, route validation, and advanced protocols like Resource Public Key Infrastructure (RPKI). By collaborating with a trusted IP provider, businesses can benefit from additional layers of protection, ensuring that only authorized traffic is routed through their IP blocks.

The setup process for BYOIP varies by provider, typically taking anywhere from a few hours to a few days. Factors include the complexity of your network, the verification process for IP ownership or authorization, and the time needed for global BGP route propagation. IP providers often expedite the preparation and validation stages, ensuring a smooth and timely integration into the desired infrastructure.

Absolutely. Many providers, in partnership with IP providers, support routing IPs across multiple data centers or geographic regions. This feature optimizes performance for global businesses by reducing latency and improving service availability. When working with an IP provider, you can also ensure that your leased or owned IPs are aligned with your geographic requirements for compliance and efficiency.

If you choose to discontinue BYOIP with a provider, your IP addresses will be released from their network, and routing will cease. You can then reallocate these IPs for use with a different service provider or project.