Before you configure real-time push notifications

before you configure real time push notifications; configure, distribute, and install email+ for ios real time notification is supported for email+ 2 4 0 for ios through the most recently released version for information about installing email+ for ios, see configuring ivanti email+ for ios docid\ r sgtcxbcmhx1fhq8uby9 for information about the ews push notification service see microsoft’s documentation at https //msdn microsoft com/en us/library/office/dn458791%28v=exchg 150%29 aspx https //msdn microsoft com/en us/library/office/dn458791%28v=exchg 150%29 aspx open port 443, for outbound only https requests, on your firewall to allow exchange to send notifications to mobileiron cns the url for the cns server is https //cns mobileiron com/prod alternately, you can enter the following ip addresses 13 56 49 23 34 253 2 239 ivanti strongly recommends entering the url for the notification server, as the ip addresses for the server might change set up your exchange environment see the following for information about installing email+ for ios, see configuring ivanti email+ for ios docid\ sexk5ihm3otnu hyv8rr4 configuring additional exchange setup for identity certificates docid\ sexk5ihm3otnu hyv8rr4 ensure that sectigoe is available in the exchange trust store as a trusted certificate authority (ca) the cloud notification service uses the sectigoe ca configuring ews to send push notifications these steps are applicable for both exchange 2010 and 2013 servers before you begin you must have enabled ews on the exchange server procedure on the exchange server, launch iis manager go to server > sites > default web site > ews ews home authentication and authorization verify that the authentication and authorization rules roles are added to iis open authentication and enable basic authentication open authorization rules and add rule to allow for all users if it was not added automatically next steps if your setup uses tunnel and identity certificates to authenticate with ews and activesync, do the additional setup on the exchange server described in configuring additional exchange setup for identity certificates docid\ sexk5ihm3otnu hyv8rr4 once you have set up your exchange environment, go to overview of configuration on ivanti epmm docid\ f7a o9 yg5f9vstyn7wp configuring additional exchange setup for identity certificates perform these steps only if your setup uses tunnel and identity certificates for authentication to ews and activesync procedure on the exchange server, launch iis manager go to server > sites > default web site > ews click on ssl settings check require ssl for client certificate, select accept in the ews directory, click on configuration editor and browse to the clientcertificatemappingauth option set the value for the option to true in the ews directory, click on authentication and enable the windows authentication option disable all other authentication types next steps once you have set up your exchange environment, go to overview of configuration on ivanti epmm docid\ f7a o9 yg5f9vstyn7wp