Push Notifications for Secure Mail with iOS 14 not working

[Marc Kuhn]

Hi guys

we have a new environment with Citrix XenMobile 10.13 On-Prem and Exchange 2016 also On-Prem. I had another topic here with the same issue in another environment. I have done the following thing here:

1. Firewall Rule configured from XenMobile to Apple: 

 
 

2. Fireall Rules configured from Netscaler & Exchange to Citrix Listeners:

 

3. Secure Mail Config:

 

Everything is working except the Push Notification. Also i noticed when i try to browse the XenMobile Server MDM URL from the Internet, i receive this error:

 

 

I'm not sure if those two things are related but with my other customers XenMobile i don't get this Error.

 

Many thanks for any hints on that.

 

Best regards,

Marc

 

[fahae]

Please check the event viewer on your Exchange server. Filter for "MSExchange Web Services" as source and see if you can find something about the EWS subscriptions.

https://support.citrix.com/article/CTX222834

 

[Marc Kuhn]

Hi

 

you are right, there are Warnings in the Logs of the Exchange Server:

 

 

Nevertheless, when i try to telnet this port with Port 443, i'm able to connect from the Exchange Server to that URL. Is there anything i can do about it?

 

Many thanks and best regards,
Marc

[fahae]

Can you cofirm your Exchange has a CU that is listed here: https://docs.citrix.com/en-us/citrix-secure-mail/overview.html

Is there a proxy between your Exchange and internet?

Have you ever tried another region for Citrix listener service?

 

 

[Marc Kuhn]

Hi

i just realized the i was able to telnet the URL, but not both of those IP's from the Exchange. There was a typo in the Firewall Rule Config. Now i receive this message on the Exchange:

 

The request was aborted: Could not create SSL/TLS secure channel. Status: SecureChannelFailure    at System.Net.HttpWebRequest.EndGetResponse(IAsyncResult asyncResult)
   at Microsoft.Exchange.Services.Core.NotificationServiceClient.HandleResponse(IAsyncResult responseAsyncResult)

 

This is configured on Exchange Side:

 

 

Best regards,

Marc

[fahae]

Please make sure that everything is talking only via TLS 1.2 

https://support.citrix.com/article/CTX277294

https://support.citrix.com/article/CTX247095