You must meet the hardware, software, network, and general requirements to successfully deploy the SEG.

AirWatch Console Requirements

  • AirWatch Console 9.0.3 or later
  • REST API enabled for the Customer type Organization Group

Prerequisite: Enable REST API

To configure the REST API URL for your AirWatch environment:

  1. Navigate to Groups & Settings > All Settings > System > Advanced > API > REST API.
  2. The AirWatch Console gets the API certificate from the REST API URL that is on the Site URLs page. For SaaS deployments, use the format as ''.

You can configure the Secure Email Gateway (V2 platform) at a Container organization group that inherits the REST API settings from a Customer type organization group.

Hardware Requirements

A Secure Email Gateway (V2 platform) server can be a VM or physical server with the following hardware.


Software Requirements

Requirement Notes

Networking Requirements

Source Component

Destination Component




Devices (from Internet and Wi-Fi)




Devices request mail from SEG

Console Server SEG HTTPS 443 Console makes administrative commands to SEG 


AirWatch REST API (DS or CN server)


80 or 443

SEG retrieves the configuration and general compliance policy information

SEG (OPTIONAL) Internal hostname or IP of all other SEG servers TCP



SEG communicates to shared policy cache across other SEGs for updates and replication

SEG localhost HTTP 44444 Admin accesses the SEG server status and diagnostic information from the localhost machine
Device Services SEG HTTPS 443 Enrollment events and real-time compliance communicates to SEG
SEG  Exchange HTTP or HTTPS 80 or 443 Verify the following URL is trusted from the browser on the SEG server and gives a prompt for credentials:

For Exchange: http(s):// Exchange_Activesync_FQDN/Microsoft-server-activesync


Requirement Notes

Remote Access to Servers

Ensure that you have remote access to the servers where AirWatch is installed. Typically, AirWatch consultants perform installations remotely over a web meeting or screen share. Some customers also provide AirWatch with VPN credentials to directly access the environment as well.