Port 2195 is used when PWS calls Apple's APNS for sending push notifications to iOS devices.

Apple also mentions ports 2196, 5223, and 443:

•2196, which is the Feedback Service, is not used.

•5223 and 443 are ports used by iOS devices when communicating with Apple.

Two levels of authentication:

•PWS server to APNS cloud uses Pulse push certificate.

•Device specific token.

See https://support.apple.com/en-us/HT203609

Google mentions 5228 is the primary port while 5229 and 5230 are secondary ports. Pulse Workspace sends notifications to Android devices using GCM notifications.

Standard HTTPS call on https://itunes.apple.com/search and
https://itunes.apple.com/lookup. The iTunes API is unauthenticated.

Standard HTTPS call on https://www.googleapis.com/customsearch/v1. The Google custom search engine API requires an API key which is not necessarily associated with any particular other credential (ESA/MSA).