---
title: Standalone Sentry setup for real-time push notifications
slug: emailplus/guide/ios/standalone-sentry-setup-for-real-time-push-notifications
createdAt: 2026-09-07T11:21:47.536Z
---

The following sections provide the authentication to the Exchange and EWS service and the supported Standalone Sentry setup.

|   | • | [Exchange, real-time push notifications, and Standalone Sentry setup](docId:9BRBuY_ltsR8baGw4etQv) |
| - | - | -------------------------------------------------------------------------------------------------- |

|   | • | [EWS service and Standalone Sentry setup](docId:9BRBuY_ltsR8baGw4etQv) |
| - | - | ---------------------------------------------------------------------- |

## Exchange, real-time push notifications, and Standalone Sentry setup

The following table shows the Standalone Sentry setup based on the required authentication and whether you are deploying real-time push notifications.

| What is the authentication to Exchange? | Do you want real-time push notification? | Supported Standalone Sentry setup                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    |
| --------------------------------------- | ---------------------------------------- | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| Basic, NTLM                             | No                                       | Enable ActiveSync on Standalone Sentry.                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              |
| Basic                                   | Yes                                      | Enable ActiveSync and AppTunnel on Standalone Sentry.<br />- Set up an AppTunnel service to tunnel Exchange Web Services (EWS).<br />Device user experience:<br />- Device users are prompted for user name and password for authentication to EWS.                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  |
| Basic                                   | Yes                                      | Enable AppTunnel on Standalone Sentry.:<br />- Set up an AppTunnel service for to tunnel Exchange Web Services (EWS) and Exchange ActiveSync (EAS) traffic.<br />Device user experience:<br />- Device users are prompted for user name and password for authentication to EWS and Exchange ActiveSync (EAS).                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        |
| Basic                                   | Yes                                      | Set up per app VPN with Tunnel.:<br />Email+ must be an MDM managed app so that it can use Tunnel.<br />Device user experience:<br />- Device users are prompted for user name and password.                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         |
| Certificate                             | No                                       | Enable ActiveSync on Standalone Sentry.                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              |
| Certificate, NTLM, Modern Auth          | Yes                                      | Setup per app VPN with Tunnel.<br />- Email+ must be an MDM managed app so that it can use Tunnel.<br />- If you are using certificates for authentication:<br />- the certificate chain (root and intermediate) must be trusted by the Exchange server.<br />- The certificate can be issued per user by a third-party CA or ADCS on Exchange.<br />- The certificate is configured as a key-value pair in the Email+ configuration in the UEM.<br />- For modern auth, Standalone Sentry setup is supported. The **PKCS-12** and **X.509** certificates should be configured on Ivanti EPMM.<br />Modern auth uses ADFS that is exposed to the internet. The AppTunnel Sentry rules should be set to \<ANY> **for adfs.company.com** on ports 443 and 49443.<br />Device user experience:<br />- Device users are not prompted for authentication. |

## EWS service and Standalone Sentry setup

The following table provides the supported authentication methods to the EWS service.

| Setup                  | Basic Auth                               | Certificate Auth | NTLM Auth | Modern Auth |
| ---------------------- | ---------------------------------------- | ---------------- | --------- | ----------- |
| ActiveSync + AppTunnel | Yes<br />Uses AppTunnel for EWS          | No               | No        | No          |
| AppTunnel only         | Yes<br />Uses AppTunnel for EWS and EAS. | No               | No        | No          |
| Tunnel                 | Yes                                      | Yes              | Yes       | Yes         |
| No Sentry              | Yes                                      | Yes              | Yes       | Yes         |