MacOS Server, Profile Manager & SmoothWall

[BentleyMiller86]

Hi All,

 

I'm having a little trouble getting my iPads to enroll to Profile Manager and I think its due to the SmoothWall filtering system (which unfortunately I don't have direct access to), my set-up is as follows:

 

 

• MacBook Air - Wi-Fi connection, Reserved IP address, OS 10.13.3, MacOS Server up to date.
  
• I am using Configurator 2 to build the initial profile, blue print is prepared to see MacOS Server as the MDM, has Wi-Fi information including global-proxy and background images.
  
• Profile Manager is linked to the VPP account and controls Restrictions and Deployed Apps.
  

 

Deploying as above the iPads pick up everything needed from my blue print but do not enroll and so the Profile Manager profile and Apps do not deploy. (the iPad just sits Pending on Enroll, the transfer of Profile, and the pushing of Apps)

 

I have also tried with a proxy avoidance script in place, however the iPads generate an error stating the profile could not be installed or the MDM cant be contacted (I cant remember the exact error, I will update tomorrow providing I have access to EduGeek on site.)

 

I cant browse to the URL for Profile Manager on an iPad but I can using the IP address of the Mac which points to DNS? but the Mac obviously doesn't have a DNS entry or a FQDN.

 

I also can manually enroll each device by navigating to the Mac's IP address, I get the flowing error:

 

Profile Installation Failed: The SCEP server configuration is not supported.

 

 

I'm starting to run out of ideas, I know other people have had issues with MacOS Server and SmoothWall's so I would really appreciate it if someone could give me some help, I'm due to hand this site over to a new engineer and would rather not leave him with a half finished set up!

 

 

Many Thanks

[Brimstone]

Sounds like Apple's APNS server is being blocked, check using these links below...

 

https://support.apple.com/en-gb/HT203609

Apple Push Notification Firewall Ports « Networking How To's

[2097]

Sounds like a DNS issue. The ipad if it has the correct DNS server should be able to ping a FQDN like your smooth-wall server ? If you cant resolve a simple DNS query such as the internal smoothwall server then i doubt it will be possible to join it to profile manager.

[BentleyMiller86]

Having spoken to the 3rd party that controls the smooth wall they have opened up the required ports, I had some success without the proxy avoidance script so I am hopeful it isn't a DNS issue! I will update after my next site visit on the 11th.

 

Thanks