Outgoing connection from EMM service to these addresses must be open

All of the addresses below should be in block 17.0.0.0/8.

Target Apple server	Outgoing TCP ports

Target Apple server	Outgoing TCP ports
itunes, vpp
vpp.itunes.apple.com	80, 443
buy.itunes.apple.com	80, 443
itunes.apple.com	80, 443
uclient-api.itunes.apple.com	80, 443

apple mdm, dep
mdmenrollment.apple.com	80, 443

apple push notification service
feedback.push.apple.com	2195, 2196
gateway.push.apple.com	2195, 2196

Note: Requirements for open ports from devices to these servers above are not included here.

mySync DM - Guides