Endpoint Agent Traffic

Jamf Connect Documentation

Solution

Application

Jamf Connect

Content Type

Technical Documentation

Utilities & Services

ft:locale

en-US

Client Configuration Endpoint

The Jamf Trust app communicates with Jamf Security Cloud via HTTPS for provisioning and onboarding.

This requires outbound TCP/443 traffic to any IP address. Jamf Security Cloud does not provide specific IP addresses for this part of the infrastructure due to the dynamic nature of the micro-service architecture.

Identity Provider (IdP) Authentication

Jamf Connect's' Zero Trust Network Access endpoint communicates directly with the your organization's identity provider (IdP) before the service is activated on the device. This traffic uses HTTPS TCP/443 and must be permitted through your firewalls to Entra ID and any federated identity providers.

This is usually already open to allow logins to cloud apps, and should not require any additional configuration.

VPN/SDP Communication

The Jamf Trust app configures a VPN tunnel between the device and Jamf Security Cloud's infrastructure.

This tunnel is over UDP port 32005 for all devices globally.

All clients use a DNS lookup to automatically discover its nearest and available Jamf SDP POP (Point of Presence) for optimized performance and routing. The DNS address used by default is wpa.wandera.com, which will automatically return an IP address that is appropriate for that device's geographic location and the Jamf Security Cloud SDP infrastructure state.

Infrastructure IP Addresses

The following table lists the IP addresses that are returned by the wpa.wandera.com lookup. For environments where outbound access on UDP/32005 is blocked (from client-to-server), these addresses must be added as permitted exceptions. Only UDP/32005 must be configured as an outbound rule since most firewalls automatically allow the return traffic over the same port in the opposite direction.

For a list of the external IP addresses used by Zero Trust Network Access, see Shared Internet Gateway IP Addresses for Zero Trust Network Access.

IP Addresses By Region

Important:

This table is no longer being updated. For a current list that receives automatic updates and includes a changelog, see Permitting Inbound/Outbound Traffic with Jamf.


Region	IP Addresses
Americas - US West (Boardman, Oregon, United States)	44.232.168.72 44.232.62.192 52.40.74.185 44.224.190.169 44.247.64.85 54.245.2.96 Clipboard friendly: `44.232.168.72,44.232.62.192,52.40.74.185,44.224.190.169,44.247.64.85,54.245.2.96` CIDR notation: `44.232.168.72/32,44.232.62.192/32,52.40.74.185/32,44.224.190.169/32,44.247.64.85/32,54.245.2.96/32`
Americas - US East (Ashford, Virginia, United States)	54.81.37.163 52.71.99.101 34.227.37.91 3.212.14.31 3.232.10.115 34.230.169.104 Clipboard friendly: `54.81.37.163,52.71.99.101,34.227.37.91,3.212.14.31,3.232.10.115,34.230.169.104` CIDR notation: `54.81.37.163/32,52.71.99.101/32,34.227.37.91/32,3.212.14.31/32,3.232.10.115/32,34.230.169.104/32`
North America - Canada (Toronto, Canada)	52.60.123.39 99.79.107.210 3.98.239.24 35.182.103.249 35.182.39.54 35.183.80.206 Clipboard friendly: `52.60.123.39,99.79.107.210,3.98.239.24,35.182.103.249,35.182.39.54,35.183.80.206` CIDR notation: `52.60.123.39/32,99.79.107.210/32,3.98.239.24/32,35.182.103.249/32,35.182.39.54/32,35.183.80.206/32`
Europe - UK (London, United Kingdom)	3.9.34.90 3.8.243.87 35.179.83.61 13.43.184.138 18.132.85.30 18.135.132.223 Clipboard friendly: `3.9.34.90,3.8.243.87,35.179.83.61,13.43.184.138,18.132.85.30,18.135.132.223` CIDR notation `3.9.34.90/32,3.8.243.87/32,35.179.83.61/32,13.43.184.138/32,18.132.85.30/32,18.135.132.223/32`
Europe - Germany (Frankfurt, Germany)	52.59.54.116 3.71.217.144 35.156.182.253 3.125.152.207 3.125.246.128 63.178.178.7 Clipboard friendly: `52.59.54.116,3.71.217.144,35.156.182.253,3.125.152.207,3.125.246.128,63.178.178.7` CIDR notation: `52.59.54.116/32,3.71.217.144/32,35.156.182.253/32,3.125.152.207/32,3.125.246.128/32,63.178.178.7/32`
Europe - Ireland (Dublin, Ireland)	34.253.55.163 52.214.227.148 34.250.21.199 52.17.42.35 54.171.228.133 99.80.126.0 Clipboard friendly: `34.253.55.163,52.214.227.148,34.250.21.199,52.17.42.35,54.171.228.133,99.80.126.0` CIDR notation: `34.253.55.163/32,52.214.227.148/32,34.250.21.199/32,52.17.42.35/32,54.171.228.133/32,99.80.126.0/32`
Asia Pacific - Australia (Sydney, Australia)	13.237.185.171 3.106.49.51 3.104.14.94 13.236.218.239 13.237.72.86 52.62.199.75 Clipboard friendly: `13.237.185.171,3.106.49.51,3.104.14.94,13.236.218.239,13.237.72.86,52.62.199.75` CIDR notation: `13.237.185.171/32,3.106.49.51/32,3.104.14.94/32,13.236.218.239/32,13.237.72.86/32,52.62.199.75/32`
Asia - Singapore (Singapore)	18.142.31.113 18.140.106.152 54.151.180.141 13.215.27.232 52.76.178.248 52.77.60.116 Clipboard friendly: `18.142.31.113,18.140.106.152,54.151.180.141,13.215.27.232,52.76.178.248,52.77.60.116` CIDR notation: `18.142.31.113/32,18.140.106.152/32,54.151.180.141/32,13.215.27.232/32,52.76.178.248/32,52.77.60.116/32`
Asia - Hong Kong (Hong Kong)	18.167.1.241 16.162.196.60 18.163.43.36 18.162.105.134 18.162.63.5 18.166.251.248 Clipboard friendly: `18.167.1.241,16.162.196.60,18.163.43.36,18.162.105.134,18.162.63.5,18.166.251.248` CIDR notation: `18.167.1.241/32,16.162.196.60/32,18.163.43.36/32,18.162.105.134/32,18.162.63.5/32,18.166.251.248/32`
Asia - Japan (Tokyo, Japan)	54.199.229.167 35.75.246.199 52.68.210.16 35.74.94.204 54.64.232.107 57.181.24.175 Clipboard friendly: `54.199.229.167,35.75.246.199,52.68.210.16,35.74.94.204,54.64.232.107,57.181.24.175` CIDR notation: `54.199.229.167/32,35.75.246.199/32,52.68.210.16/32,35.74.94.204/32,54.64.232.107/32,57.181.24.175/32`
Asia - India (Mumbai, India)	3.109.103.127 3.7.34.33 13.235.249.165 15.206.150.190 3.109.188.145 43.205.223.205 Clipboard friendly: `3.109.103.127,3.7.34.33,13.235.249.165,15.206.150.190,3.109.188.145,43.205.223.205` CIDR notation: `3.109.103.127/32,3.7.34.33/32,13.235.249.165/32,15.206.150.190/32,3.109.188.145/32,43.205.223.205/32`
South America - Brazil (Sao Paulo, Brazil)	54.232.135.245 18.229.66.35 54.94.89.64 18.228.87.18 54.233.180.253 56.125.57.171 Clipboard friendly: `54.232.135.245,18.229.66.35,54.94.89.64,18.228.87.18,54.233.180.253,56.125.57.171` CIDR notation: `54.232.135.245/32,18.229.66.35/32,54.94.89.64/32,18.228.87.18/32,54.233.180.253/32,56.125.57.171/32`
Africa - South Africa (Cape Town, South Africa)	13.245.103.224 13.246.100.111 13.246.100.252 13.244.44.41 13.247.165.163 13.247.228.249 Clipboard friendly: `13.245.103.224,13.246.100.111,13.246.100.252,13.244.44.41,13.247.165.163,13.247.228.249` CIDR notation: `13.245.103.224/32,13.246.100.111/32,13.246.100.252/32,13.244.44.41/32,13.247.165.163/32,13.247.228.249/32`
All Global IP Addresses	Clipboard friendly: 44.232.168.72,44.232.62.192,52.40.74.185,44.224.190.169,44.247.64.85,54.245.2.96,54.81.37.163,52.71.99.101,34.227.37.91,3.212.14.31,3.232.10.115,34.230.169.104,52.60.123.39,99.79.107.210,3.98.239.24,35.182.103.249,35.182.39.54,35.183.80.206,3.9.34.90,3.8.243.87,35.179.83.61,13.43.184.138,18.132.85.30,18.135.132.223,52.59.54.116,3.71.217.144,35.156.182.253,3.125.152.207,3.125.246.128,63.178.178.7,34.253.55.163,52.214.227.148,34.250.21.199,52.17.42.35,54.171.228.133,99.80.126.0,13.237.185.171,3.106.49.51,3.104.14.94,13.236.218.239,13.237.72.86,52.62.199.75,18.142.31.113,18.140.106.152,54.151.180.141,13.215.27.232,52.76.178.248,52.77.60.116,18.167.1.241,16.162.196.60,18.163.43.36,18.162.105.134,18.162.63.5,18.166.251.248,54.199.229.167,35.75.246.199,52.68.210.16,35.74.94.204,54.64.232.107,57.181.24.175,3.109.103.127,3.7.34.33,13.235.249.165,15.206.150.190,3.109.188.145,43.205.223.205,54.232.135.245,18.229.66.35,54.94.89.64,18.228.87.18,54.233.180.253,56.125.57.171,13.245.103.224,13.246.100.111,13.246.100.252,13.244.44.41,13.247.165.163,13.247.228.249 CIDR notation: jamf_connect_ztna_endpoint_agent_ip_addresses.txt (Jamf Github)