XenMobile

Firebase Cloud Messaging

August 11, 2023

Contributed by:

K K

Note:

Firebase Cloud Messaging (FCM) was previously known as Google Cloud Messaging (GCM). Some XenMobile console labels and messages use the GCM terminology.

Citrix recommends that you use Firebase Cloud Messaging (FCM) to control how and when Android devices connect to XenMobile. XenMobile, when configured for FCM, sends connection notifications to Android devices that are enabled for FCM. Any security action or deploy command triggers a push notification to prompt the user to reconnect to the XenMobile server.

After you complete the configuration steps in this article and a device checks in, the device registers with the FCM service in XenMobile Server. That connection enables near real-time communication from your XenMobile service to your device by using FCM. FCM registration works for new device enrollments and previously enrolled devices.

When XenMobile needs to initiate a connection to the device, it connects to the FCM service. Then, the FCM service notifies the device to connect. This type of connection is similar to what Apple uses for its Push Notification Service.

Prerequisites

Latest Secure Hub client
Google developer account credentials
Google Play services installed on FCM-enabled Android devices

Firewall ports

Open port 443 on XenMobile to fcm.googleapis.com and Google.com.
Open outgoing, Internet communication for device Wi-Fi on ports 5228, 5229, and 5230.
To allow outgoing connections, FCM recommends allowing ports 5228 through 5230 with no IP restrictions. However, if you require IP restrictions, FCM recommends allowing all the IP addresses in the IPv4 and IPv6 blocks. Those blocks are listed in the Google ASN of 15169. Update that list monthly. For more information about FCM ports, see the Google documentation on FCM ports.

For more information, see Port requirements.

Architecture

This diagram shows the communication flow for FCM in the external and internal network.

The FCM architecture

To configure your Google account for FCM

Sign in to the following URL using your Google developer account credentials:

https://console.firebase.google.com/
Click Add project.
After you create the project, click Project settings.
Click the Cloud Messaging tab.
If the Cloud Messaging API (Legacy) is disabled, then the Server key is not be displayed.

Enable the Cloud Messaging API (Legacy) as follows:
1. Click the Ellipses button next to Cloud Messaging API (Legacy) and then click Manage API in Google Cloud Console.
2. Under CLoud Messaging, click Enable button.
Copy the Server key and Sender ID values. In the next procedure, you paste those values in the XenMobile console. As of October 2016, you must create Server Keys in the Firebase console.

For steps to set up an FCM client app on Android, see this Google Developers Cloud Messaging article: https://firebase.google.com/docs/cloud-messaging/android/client.

To configure XenMobile for FCM

In the XenMobile console, go to Settings > Firebase Cloud Messaging.

Edit API key, and type the Firebase Cloud Messaging Server key that you copied in the last step of Firebase Cloud Messaging configuration.
Edit Sender ID, and type the Sender ID value you copied in the previous procedure.

The Sender ID value entry

After you complete the setup, you can remove your Scheduling device policy or change that policy to connect less often.

To test your configuration

Enroll an Android device.
Leave the device idle for some time, so that it disconnects from XenMobile.
Sign in to the XenMobile console, click Manage, select the Android device, and then click Secure.
Under Device Actions, click Selective Wipe.

In a successful configuration, selective wipe occurs on the device.

The official version of this content is in English. Some of the Cloud Software Group documentation content is machine translated for your convenience only. Cloud Software Group has no control over machine-translated content, which may contain errors, inaccuracies or unsuitable language. No warranty of any kind, either expressed or implied, is made as to the accuracy, reliability, suitability, or correctness of any translations made from the English original into any other language, or that your Cloud Software Group product or service conforms to any machine translated content, and any warranty provided under the applicable end user license agreement or terms of service, or any other agreement with Cloud Software Group, that the product or service conforms with any documentation shall not apply to the extent that such documentation has been machine translated. Cloud Software Group will not be held responsible for any damage or issues that may arise from using machine-translated content.

Was this helpful

Firebase Cloud Messaging

August 11, 2023

Contributed by:

K K

August 11, 2023

Contributed by:

K K

Firebase Cloud Messaging

Prerequisites

Firewall ports

Architecture

To configure your Google account for FCM

To configure XenMobile for FCM

To test your configuration

In this article