[Environment]
Knox Platform for Enterprise
SDS IAM & EMM

[Summary]
As an IT admin, you must ensure that your enterprise devices have access to the following Knox servers:

• Samsung license servers — so that when you activate Knox services, devices can verify their license keys. Devices periodically check their licenses a few times a week.
• Samsung SDS IAM & EMM — if you are using EMM, so that devices can access the web-based EMM consoles and storage sites. If you are using another EMM system, you do not need to do this.
• Samsung ActiveSync Server - if you are using Exchange ActiveSync, so that the email client can successfully reach our ActiveSync servers

Note – If your enterprise is highly regulated and does not allow communication with external servers, you can request the on-premise Knox server, which handles license verification within your firewall. Samsung charges an extra fee for this service. For more information, contact your Samsung representative or reseller.

[Resolution]

Here are the servers you must add to your firewall exception list.

 

If you are in America, enable access to these servers:

• gslb.secb2b.com:443
• us-elm.secb2b.com:443
• us-prod-klm.secb2b.com:443

If you are in China, enable access to these servers:

• china-gslb.secb2b.com.cn:443
• china-elm.secb2b.com.cn:443
• china-klm.secb2b.com.cn:443

If you are in Asia, Africa, Europe, or other regions, enable access to these servers:

• gslb.secb2b.com:443
• eu-elm.secb2b.com:443
• eu-prod-klm.secb2b.com:443

• *.cloudapp.net:80 and 443
• *.centrify.com:80 and 443
• *.samsungknox.com:80 and 443
• www.public-trust.com:80 and 443
• mscrl.microsoft.com:80 and 443
• Azure Datacenters:80 and 443 or 9350 – 9354. The complete list of IPs can be downloaded from https://www.microsoft.com/en-us/download/confirmation.aspx?id=41653

Samsung ActiveSync Server

• https://api.samsungapps.com/activesync/activate/activesync