ManageEngine Mobile Device Manager Plus supports managing your mobile devices from a central point. It allows you to perform Policy Management, Profile Management, Asset Management, App Management and Security Management of mobile devices.
The advantages of using the architecture of Mobile Device Manager Plus include the following:
For the above setup to work, the following should be done
Assuming users' mobility, MDM server should be reachable via public IP address. You should NAT your internal IP of MDM server to a public IP to enable this. If all the devices managed are within the LAN, this requirement is not needed.
9383 - Used for secured communication between the agent and the Mobile Device Manager Plus
443 - Should be open at the firewall/ proxy for MDM server to reach APNs. Host address: api.push.apple.com2195 - Should be open at the firewall/ proxy for the MDM server to reach the APNs. Host address: gateway.push.apple.com.
5223 - If the mobile device connects to the internet through the Wi-Fi, then this port should be opened. For better security, you can restrict these connections on the IP range 220.127.116.11/8. If all the managed devices have access to cellular data network, this requirement is not needed.
NOTE: If your wifi is behind a firewall or you make use of a private Access Point Name for cellular data, then ensure access has been provided to the specific ports.
443 - Used for secured communication between the MDM server and the FCM server.
Port numbers 5228, 5229, 5230 should be open on the firewall, If the mobile device connects to the internet through WiFi. This enables communication between the mobile devices and the FCM.