Apple Profile Manager : MDM Ports , Push Notifications

Did you install the Trust Profile for your OSX devices in addition to the enrollment profile?

But when I tried to open the ports (tried both text based and with ICE Flor)
sudo ipfw add 27860 allow tcp from any to any dst-port 2196
sudo ipfw add 27860 allow tcp from any to any dst-port 2195
add 78600 allow tcp from any to any dst-port 5223

When I use sudo lsof -i -P | grep -i "listen" , it didnot show me if the ports are open.

You don't see those ports open on your server, because they are not supposed to be open and your server is not listening on them.

2195 and 2196 are used by your server to connect outgoing to APNS (Apple Push Notification Server), so your server won't need to listen there, nor be reachable here, but your server must be able to connect to Apple on these ports.

5223 is basically the same, but for your clients. Any Apple device that wants to have Push services will use this port for an outgoing TCP connection to APNS. So again, your server wont listen here.

The only incoming ports to the server are 443 (for both the web interface and the devices checking in for new profiles etc.) and 1640 (only used during inital enrollment).

hi,

also I have configure MDM Ariwatch in my company. sending notification and install profile in IOS devices is not working.

I have contact Airwatch support team, they ask me to open ports 2195 and 2196.

then I request my network team to open above ports, they have try using ULR- gateway and feedback-. its not working. Then they try to use IP address, but they noted that the IP is continually changing. I have request support team to gave me on IP than I can use., they send IP 17.0.0.0/8 for both ports.

then I informed firewall admin to open that port using 17.0.0.0 IP address, but he didn't accept this because its not secure to allow this range in firewall.

and Airwatch team say this limitation from Apple said.

please Advise.

Perhaps a conference call with Apple and your networking people would be helpful.

Enterprise support:

Call enterprise support (866) 752-7753 to create a case ID number

thank you very much for your response...

BUT I'm not able to reach the (866) 752-7753

can you send full number with open line?

Here is the list of well known ports. Can't a firewall limit access from an ip address and a port? Should get past network group protests.

TCP and UDP ports used by Apple software products - Apple Support

Well, the general Apple contact number is:

Apple