Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

We're setting up a public facing server for Profile Manager use only. Profile Manager uses the following ports:

2195, 2196 TCP Used by Profile Manager to send push notifications 5223 TCP Used to maintain a persistent connection to APNs and receive push notifications 80/443 TCP Provides access to the web interface for Profile Manager admin 1640 TCP Enrollment access to the Certificate Authority

Our internal Security people are asking us to disable the following ports for security reasons:

88: Kerberos 389: LDAP 464: kpasswd 749: Kerberos 5 3659: SASL (Password Server)

1) Can this be done given what we're trying to do (iOS Policy Management via Profile Manager only).

2) What are the Terminal Commands for toggling these ports on and off for testing? 3) Is it better to shut down associated services rather than the ports assuming some ports might be shared?

share|improve this question

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Browse other questions tagged or ask your own question.