Network Check

Network Check

Test whether this Mac can reach the network endpoints that Jamf, Apple, Microsoft, Google and other services need. Read-only, and doesn't connect to Jamf Pro.

Use it when devices won't enrol, check in, update or install apps, and you suspect a firewall, proxy or content filter. Every test runs from the Mac running Magic Toolbox, so the results show what that Mac's network allows. They don't tell you anything about your Jamf Pro server's own network.

How to use it

1. Under Scan, tick the vendors to test. Jamf is ticked by default.

   Vendor	What's tested
   Jamf	Jamf Cloud services, JCDS uploads and downloads, Apple Push Notification service, Jamf Protect, Jamf Remote Assist, and the Microsoft endpoints used for Jamf co-management
   Apple	Device setup and enrolment, Apple Business and School Manager, push notifications, software and app updates, App Store, iCloud, certificate validation, content caching and more
   Microsoft	Entra ID, Intune, Microsoft 365, Teams, OneDrive and SharePoint, Graph and Windows Update
   Google	Workspace, Chrome and ChromeOS, Google Meet, Google Play and Firebase
   Okta, CrowdStrike, Zoom, Slack	Each service's sign-in, console and core endpoints

2. Optionally, add your own endpoints under Custom Hosts: click Add Host, then enter a host name, a port (1–65535) and TCP or UDP. Rows that aren't valid are ignored.

3. Choose a Timeout: 5s, 10s, 20s or 30s.

4. Click Run Scan. All the endpoints are tested at once. Cancel stops the scan.

Run Again repeats the scan, and Reset clears the results.

Results

Counts for Total, Pass, Fail and Warn are shown at the top, with the pass rate. Results are grouped by vendor and then by category, and each category shows how many of its endpoints passed. Each row shows the host, port, protocol, a description and how long the connection took.

Result	Meaning
Pass	A TCP connection to the host and port was opened
Fail	The connection was refused, couldn't be made, or timed out. The reason is shown
Warn	A UDP test. UDP has no handshake, so the packet was sent but the app can't tell whether it arrived

A pass means the port is open from this Mac. It doesn't check the service behind it, or anything that happens after the connection opens, such as TLS inspection by a proxy.

Where a vendor documents a wildcard domain, such as *.push.apple.com, a representative host from that domain is tested.

Export

Export HTML… saves NetworkCheck-<date>.html with the counts and a section per vendor that you can filter by Pass, Fail or Warn. The footer shows the timeout used.

Permissions: none. Network Check doesn't connect to Jamf Pro.