Apple Network Ports Needed for macOS 13

To ensure Apple services function properly in macOS 13 (Ventura), network administrators and users must configure their firewalls and routers to allow traffic across specific TCP and UDP ports. Apple devices rely on these communication channels for core functions, including Apple ID verification, iCloud syncing, software updates, Apple Push Notifications (APNs), FaceTime, and local networking features like AirPlay. Restricting these ports can lead to synchronization failures, blocked updates, or loss of device management capabilities.

Essential Web and Authentication Ports

Core Apple ecosystem features—including macOS software updates, the Mac App Store, iCloud services, and Apple ID sign-ins—rely primarily on standard secure web traffic:

  • TCP Port 443 (HTTPS): Required for virtually all secure Apple services, including iCloud Drive, App Store downloads, Siri, macOS activation, and recovery servers.
  • TCP Port 80 (HTTP): Used for non-encrypted web services, initial captive portal checks, and downloading certificate revocation lists (CRLs) and Online Certificate Status Protocol (OCSP) verification.

Apple Push Notification Service (APNs)

macOS 13 depends heavily on APNs for iMessage, device management (MDM), FaceTime alerts, and real-time syncing across apps:

  • TCP Port 5223: The primary port macOS uses to maintain a persistent background connection to APNs when connected to a Wi-Fi or local network.
  • TCP Port 443: Used as a fallback when port 5223 is blocked by strict firewall policies, though maintaining access on 5223 is recommended for optimal performance.
  • TCP Port 2197: Required if the Mac interacts directly with Mobile Device Management (MDM) servers sending push notifications.

FaceTime and Media Calling

FaceTime audio and video calls require specific ports for session establishment and media streaming:

  • UDP Ports 3478 through 3497: Used by Session Traversal Utilities for NAT (STUN) and Traversal Using Relays around NAT (TURN) to initiate and negotiate FaceTime connectivity.
  • UDP Ports 16384 through 16387 and 16393 through 16402: Used for transmitting real-time audio and video streams (RTP/RTCP) during FaceTime calls.
  • TCP Port 5223: Used to alert the device of incoming calls via APNs.

System Utilities and Time Sync

macOS requires precise system time synchronization and domain resolution for security certificates to remain valid:

  • UDP Port 123: Network Time Protocol (NTP), required to sync system time with time.apple.com.
  • UDP/TCP Port 53: Domain Name System (DNS), required for resolving Apple hostnames.

Local Network and Continuity Features

For local features such as AirDrop, AirPlay, Universal Control, and Bonjour printer discovery within macOS 13:

  • UDP Port 5353: Multicast DNS (mDNS/Bonjour), essential for local device discovery, AirPlay, and AirDrop handshakes.
  • TCP Ports 7000 and 7100: Used for AirPlay video and screen mirroring streaming.
  • TCP Port 5000: Used for AirPlay server functions.

iCloud Mail Configuration

If using the native Mail application with an iCloud email address (@icloud.com, @me.com, or @mac.com):

  • TCP Port 993: IMAP with SSL for receiving mail.
  • TCP Port 587: SMTP submission with TLS/STARTTLS for sending outbound mail.