To ensure timely delivery of commands to Android devices, Kaspersky Security Center uses the mechanism of push notifications. Push notifications are exchanged between Android devices and Administration Server through Firebase Cloud Messaging (hereinafter referred to as FCM). In Kaspersky Security Center Web Console, you can specify the Firebase Cloud Messaging settings to connect Android devices to the service.
To retrieve the settings of Firebase Cloud Messaging, you must have a Google account.
To enable the use of FCM:
In the main window of Kaspersky Security Center Web Console, select Assets (Devices) → Mobile → Devices.
Open the 3-dot menu () and select Forced Android device synchronization.
In the Firebase project number field, specify the FCM Sender ID.
In the Private key field, select the private key file.
At the next synchronization with Administration Server, Android devices will be connected to Firebase Cloud Messaging.
When you switch to a different Firebase project, you need to wait 10 minutes for FCM to resume.
FCM service runs in the following address ranges:
From the Android device's side, access is required to ports 443 (HTTPS), 5228 (HTTPS), 5229 (HTTPS), and 5230 (HTTPS) of the following addresses:
google.com
fcm.googleapis.com
oauth2.googleapis.com
android.apis.google.com
All of the IP addresses listed in Google's ASN of 15169
From the Administration Server side, access is required to port 443 (HTTPS) of the following addresses:
fcm.googleapis.com
All of the IP addresses listed in Google's ASN of 15169
If the proxy server settings have been specified in the Administration Server properties in Web Console, they will be used for interaction with FCM.
Configuring FCM: getting the Sender ID and private key file