Menu

What are the firewall exceptions that I need to configure in order to use Knox Manage?

In order to implement Knox Manage and Knox Remote Support in your enterprise deployment, you must configure the following URLs and port exceptions for the network of your device fleet.

Knox Manage exceptions

Device fleet contains URL Ports
All *.samsungknox.com 443 or 80
*.secb2b.com
*.samsung.com
*.gstatic.com
Android devices android.googleapis.com 443, 5228, 5229, 5230
Android devices on isolated network1 play.google.com 443 or 80
android.clients.google.com
accounts.google.com
iOS devices gateway.push.apple.com 2195
feedback.push.apple.com 2196
Windows devices *.wns.windows.com 443
*.notify.live.net

1 An isolated network is a network that is separate from your enterprise IT network.

Knox Remote Support exceptions

Region Server Domain IP address Port Connection
Asia Relay ap‑rs‑relay.manage.samsungknox.com 18.141.250.233 45001 Mobile
13.213.198.62
WAS ap‑rs‑web.manage.samsungknox.com - 443 Desktop
US Relay us‑rs‑relay.manage.samsungknox.com 35.83.188.168 45001 Mobile
52.36.230.249
WAS us‑rs‑web.manage.samsungknox.com - 443 Desktop
EU Relay eu‑rs‑relay.manage.samsungknox.com 54.155.132.151 45001 Mobile
63.34.35.115
WAS eu‑rs‑web.manage.samsungknox.com - 443 Desktop

For more information on the requirements for Knox Remote Support, see Knox Remote Support minimum requirements.