Apple IP range whitelisting

[Asifahmed]

Hello All,

I am going to setup a cloud JAMF system for a company, just curious to know what are the IP ranges has to be whitelisted for Apple to manage Apple devices(mac devices mainly) from company's firewall so that mac devices can speak to Apple and we can manage the mac devices through JAMF without any network blockage.

[TrentO]

The simplest answer is 17.0.0.0/8. The entire block belongs to Apple. 

Source: Use Apple products on enterprise networks > near the bottom under Firewalls

[sdagley]

Allowing traffic is the only requirement. If SSL inspection is utilized on the company network you'll want to exclude al of the servers listed in the Apple KB article @TrentO linked to as Apple utilizes certificate pinning on them and if the traffic is subject to SSL inspection you'll have problems.