Enrollments of iOS Devices Fail on Internal Network but Succeed Externally

[tylalonde]

Two weeks ago enrolment on internal network worked fine. Not sure what is causing this issue, I'm guessing a certificate but none were changed within the JAMF environment.

Manual enrolment fails on installing MDM profile, Prestage Enrolment fails on Remote Management screen with the message "Invalid Profile".

Ticket in with JAMF support but nothing useful as of yet. Any advice or help would be appreciated.

[lidiya_dergache]

Do you have any update yet?

[tylalonde]

@lidiya_dergacheva Nothing helpful. I was told to try updating Java on the management points but was away last week so going to try that but I don't believe that will have any affect on the issue.

[lidiya_dergache]

@tylalonde Did you go through your firewall rules outbound for Apple Services? Outbound to 17.0.0.0/8 should be allowed for tcp 443, 2195, and 8443. Also any of the Apple Push Services will probably be useful. I've noticed SSL inspection makes a huge difference so toggling the settings you have for that will be helpful too.

[jared_f]

DNS & Firewall