| Port | Protocol | Description | Connections Initiated |
|---|---|---|---|
| 5223/443 | TCP | Ensures Jamf School can communicate properly with managed devices. Be sure to allow outbound connections to and redirects from Apple's 17.0.0.0/8 block over these ports from all client networks. This ensures that Apple Push Notification service (APNs) will function correctly on your network. | To Jamf School and to APNs |
| 389/636 | LDAP or LDAPS | Directory service integration via LDAP (389) or LDAP over SSL (LDAPS/636) can be used for user authentication, device assignment, and user information and group membership lookups. | Jamf School server to LDAP/Domain controller Note: All Jamf School server LDAP connections will originate from the Jamf School server. |
In addition to the ports in the table, see the following articles from Apple's support website for additional ports that must be safelisted: