We use Apple's Profile Manager MDM. Occasionally a user will forget the passcode to unlock their iPad. We should be able to user Profile Manager to clear their passcode. However, I've noticed that "Class Passcode" tasks never seem to complete even though the iPad has a WiFi connection.
So what I'd like to know is how the "Clear Passcode" command gets to the iPad. Is it from our local server (LAN)? Or is it from Apples push notification servers (WAN)?
Why does it matter? We use the CyberHound(NetBox Blue) firewall/proxy. Access to the internet goes through a transparent proxy, and requires frequent authentication through a captive portal. If the message comes from Apple's servers then I would need to setup an authentication bypass rule, as messages wont get through until the iPad is authenticated and a locked iPad will never show the captive portal login page.