What's new 
We are setting up Android Enterprise app management through Hexnode in a restricted network and need to allow communication with managed Google Play. What firewall ports and Google domains should be opened so devices can download apps and receive Play services/FCM communication properly?
23 Views
Replies (1)
Marked SolutionPending Review
Hexnode Expert
1 day ago
Sep 06, 2026
Marked SolutionPending Review
For Android Enterprise app deployment through managed Google Play, allow traffic to both the required TCP ports and Google Play-related hostnames.
Required TCP ports:
– TCP 443: Used for secure HTTPS communication with Google Play services and Hexnode endpoints.
– TCP 80: Used for HTTP redirection and certificate revocation list validation.
– TCP 5228, 5229, and 5230: Used by Google Play Services/Firebase Cloud Messaging for push notifications, real-time communication, and background sync.
Common Google Play hostnames to allowlist:
– play.googleapis.com
– googleusercontent.com
– android.clients.google.com
– ggpht.com
– gvt1.com
Also make sure your Hexnode portal/server endpoints are reachable from the managed devices. If these ports or domains are blocked, app installation, managed Google Play access, or background sync may fail on Android devices.
Regards,
Mary Romero
Save