IP addresses for AD and SCEP connections

This page lists the ports and IP addresses Sophos Mobile uses to connect to your Active Directory (AD) or Simple Certificate Enrollment Protocol (SCEP) server.

Sophos Mobile must connect to your AD or SCEP server for the following features:

• User authentication with AD credentials when enrolling Apple Business Manager, Google zero-touch, or Samsung KME devices. See Configure LDAP connection.
• Distributing certificates to your devices through SCEP. See Configure SCEP.

When you use one of these features, configure your firewall to allow inbound connections for the ports and IP addresses listed below.

Ports

For LDAP connections, Sophos Mobile uses TCP port 636.

For SCEP connections, Sophos Mobile uses TCP port 443.

IP addresses

Sophos Mobile uses the IP addresses listed below. The addresses depend on the Sophos Central region for your account.

To find out the region for your account, see Find out Sophos Central region.