Profile Manager - Not working over the internet!

[FlowerManDan]

Hi Everyone, Have an issue where I am unable to send Profile Manager commands over the internet.

 

For example, I can send Profile Manager commands over the LAN normally.

 

I can enable lost mode, update device info etc.. But when it comes to doing it to a managed device that's been taken off site or tethered to my iPhone, when sending a command from the profile manage console it just sticks in the job queue and nothing happens.

 

When I check the php.log I can see the jobs I requested when the iPad was on the LAN but I am not able to see the jobs that I requested when the iPad was taken off site or tethered to my iPhone.

I've spoken to our ISP who manages the ports and they have assured me that all necessary ones for Profile Manager have been opened up.

 

I've tried my best to troubleshoot why this may not be working but i'm at a loose end. Anyone out there who is able to lend a hand?

Edited June 26, 2018 by FlowerManDan

[Brimstone]

Ports are not the only thing required here......

 

1. Whitelist the Apple network block 17.0.0.0/8 on all ports.

 

Ports 80 & 443 for http/https and 5223, 2195 and 2196 for Apple Push Notification services are the most important, but whitelisting all ports will alleviate any ongoing issues when Apple expand or change devices and services in the future.

 

Personally I wouldn’t touch PM as it’s only a proof of concept MDM, this can fail numerous times, refuse to push settings and content.

Edited June 27, 2018 by Brimstone

[free780]

Is your external DNS up to date? Can you reach the server in a browser externally?