The following articles from Apple's support documentation provide a list of network requirements / ports used by Apple services:
URL allow list:
a.simplemdm.com
https://simplemdm.e9d69694c3d8f7465fd531512c22bd0f.r2.cloudflarestorage.com
https://websocket.app.pdq.com/
(websocket proxy)
IP Address allow list:
PDQ's services are hosted on Cloudflare and Google. You can view Cloudflare's IP ranges here for reference, but it is not necessary or recommended to allow-list these IPs, since your specific destination IP may vary by geographical and network connection/ISP location.
If you're experiencing difficulty connecting to our websocket proxy address above, you may allow-list these IPs:
34.54.45.198:443
[2600:1901:0:7cca::]:443