Operation Manual

Chapter 5 Internet services 50
Apple Push Notication Service (APNs)
Many services rely on Apple Push Notication Service (APNs). APNs is a key part of how Apple
devices learn of updates, MDM policies, and incoming messages. In order for your Apple devices
to work with these services, you need to allow network trac from the device to Apples network
(17.0.0.0/8) on port 5223, with a fallback option of port 443.
This trac is a secured, binary protocol specic to APNs, and can’t go through a proxy. Attempts
to inspect the trac or reroute it will result in the client, APNs, and push provider servers marking
the network conversation as compromised and invalid.
There are multiple layers of security applied to APNs at the endpoints and the servers.
To read technical information about these precautions, see Local and Remote Notication
Programming Guide.
100% resize factor