Permitting Inbound/Outbound Traffic with Jamf

This publication outlines IP prefixes and addresses that must be added to a safelist or firewall to allow inbound and outbound communication between your organization's internal network or permitted services, such as LDAP, and Jamf.

Network Communication

For information about network communication used by Jamf Pro, the Jamf Pro server, Jamf Pro apps, and third-party integrations, see Network Ports Used by Jamf Pro.
For information about network communication used by the macOS Security Portal (Jamf Protect), see Network Communication used by the macOS Security Portal.
For information on network communication used by Jamf Security Cloud and IP addresses that must be added to a safelist or firewall, see Network Communication used by Jamf Security Cloud and Permitting Inbound/Outbound Traffic with Jamf Security Cloud.
For information on IP addresses used by Jamf Safe Internet that must be added to a safelist or firewall, see Permitting Inbound/Outbound Traffic with Jamf Safe Internet.

Jamf Domains Safelist

For information about additional domains used by Jamf services, see the Jamf Domains Safelist Reference.

Machine-Readable Address Lists

IP address lists are also available in machine-readable formats at the following URLs:

Note:

IP addresses resolved from a simple nslookup query will not work, as these addresses can change at any time.
Jamf controls the IP addresses listed on this page and is the only organization with access to communicate through them.
IP addresses may be registered in one geographic region while being physically deployed and serving traffic in another region.

Services Reference


Name	Description
`jamf_pro_cloud`	Traffic for cloud-hosted Jamf Pro environments, generally known as Jamf Cloud.
`jamf_cloud_services`	Traffic for configuring LDAP, SMTP, Rsyslog, SCCM, Title Editor, and other Jamf Pro services.
`jamf_cloud_distribution_service`	Traffic for cloud distribution points available with the Jamf Cloud Distribution Service (JCDS).
`jamf_ztna_endpoint`	Endpoint agent traffic for Jamf's Zero Trust Network Access capability.