The following articles from Apple's support documentation provide a list of network requirements / ports used by Apple services:
URL allow list:
a.simplemdm.comhttps://simplemdm.e9d69694c3d8f7465fd531512c22bd0f.r2.cloudflarestorage.comhttps://websocket.app.pdq.com/ (websocket proxy)
IP Address allow list:
PDQ's services are hosted on Cloudflare and Google. You can view Cloudflare's IP ranges here for reference, but it is not necessary or recommended to allow-list these IPs, since your specific destination IP may vary by geographical and network connection/ISP location.
If you're experiencing difficulty connecting to our websocket proxy address above, you may allow-list these IPs:
34.54.45.198:443[2600:1901:0:7cca::]:443