Back to top

What are the firewall exceptions that I need to configure in order to use Knox Manage?

Last updated November 30th, 2023

Categories:

In order to implement Knox Manage and Knox Remote Support in your enterprise deployment, you must configure the following URLs and port exceptions for the network of your device fleet.

Knox Manage exceptions

Platform URL Ports
All *.samsungknox.com TCP/443, 80
*.secb2b.com
*.samsung.com
*.gstatic.com
Android *.google.com

TCP/443

TCP, UDP/5228-5230, 5235, 5236

android.com
google-analytics.com
googleusercontent.com
*gstatic.com
*.gvt1.com
*.ggpht.com
*.gvt2.com
*.gvt3.com
*.googleapis.com TCP/443, 5228-5230
iOS *.push.apple.com TCP/443, 5223, 2197
Windows *.wns.windows.com 443
*.notify.live.net

Knox Remote Support exceptions

Region Server Domain IP address Port Connection
Asia Relay ap-rs-relay.manage.samsungknox.com 18.141.250.233 45001 Mobile
13.213.198.62
WAS ap-rs-web.manage.samsungknox.com - 443 Desktop
US Relay us-rs-relay.manage.samsungknox.com 35.83.188.168 45001 Mobile
52.36.230.249
WAS us-rs-web.manage.samsungknox.com - 443 Desktop
EU Relay eu-rs-relay.manage.samsungknox.com 54.155.132.151 45001 Mobile
63.34.35.115
WAS eu-rs-web.manage.samsungknox.com - 443 Desktop

For more information on the requirements for Knox Remote Support, see Knox Remote Support minimum requirements.

Additional information

For more information on Android network requirements, refer to Android Enterprise Network Requirements.

For more information on iOS network requirements, refer to Configure your network for MDM and Use Apple products on enterprise networks.

For more information on Windows network requirements, refer to Adding WNS Traffic to the Firewall Allowlist.

Is this page helpful?