Which Pure1 app functionality requires that a user is on their internal company network?

The Pure1 mobile app (available on iOS and Android) is a powerful, cloud-connected tool that allows storage administrators and engineers to monitor their fleet from anywhere in the world. Viewing array telemetry (like IOPS, latency, and bandwidth), monitoring capacity utilization, and managing support cases are all handled seamlessly through Pure1's secure cloud infrastructure. These features work perfectly fine over a standard cellular network or public Wi-Fi.

However, enabling a Remote Assist session is treated with a much higher level of security. Remote Assist opens a secure, reverse SSH tunnel directly from the array to Pure Storage Support, allowing them to perform troubleshooting or execute upgrades. To trigger this from the Pure1 mobile app, the command must be authenticated and sent directly to the array's local management IP interface—it does not pass blindly down from the cloud.

Because of this architectural security design, the mobile device must be connected to the internal company network (e.g., via a corporate VPN or internal corporate Wi-Fi network) that has routing access to the array's management subnet. This ensures the organization's existing firewall and security models are respected, preventing unauthorized external triggers of support tunnels.