You must meet the hardware, software, network, and general requirements to successfully deploy the SEG.

AirWatch Console Requirements

  • AirWatch Console 9.0.3 or later
  • REST API enabled for the Customer type Organization Group

Prerequisite: Enable REST API

To configure the REST API URL for your AirWatch environment:

  1. Navigate to Groups & Settings > All Settings > System > Advanced > API > REST API.
  2. The AirWatch Console gets the API certificate from the REST API URL that is on the Site URLs page. For SaaS deployments, use the format as 'XX.airwatchportals.com'.

You can configure the Secure Email Gateway (V2 platform) at a Container organization group that inherits the REST API settings from a Customer type organization group.

Hardware Requirements

A Secure Email Gateway (V2 platform) server can be a VM or physical server with the following hardware.

 

Software Requirements

Requirement Notes

Networking Requirements

Source Component

Destination Component

Protocol

Port

Description

Devices (from Internet and Wi-Fi)

SEG

HTTPS

443

Devices request mail from SEG

Console Server SEG HTTPS 443 Console makes administrative commands to SEG 

SEG

AirWatch REST API (DS or CN server)

HTTP or HTTPS

80 or 443

SEG retrieves the configuration and general compliance policy information

SEG (OPTIONAL) Internal hostname or IP of all other SEG servers TCP

5701

41232

SEG communicates to shared policy cache across other SEGs for updates and replication

SEG localhost HTTP 44444 Admin accesses the SEG server status and diagnostic information from the localhost machine
Device Services SEG HTTPS 443 Enrollment events and real-time compliance communicates to SEG
SEG  Exchange HTTP or HTTPS 80 or 443 Verify the following URL is trusted from the browser on the SEG server and gives a prompt for credentials:

For Exchange: http(s):// Exchange_Activesync_FQDN/Microsoft-server-activesync

Recommendations

Requirement Notes

Remote Access to Servers

Ensure that you have remote access to the servers where AirWatch is installed. Typically, AirWatch consultants perform installations remotely over a web meeting or screen share. Some customers also provide AirWatch with VPN credentials to directly access the environment as well.