cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 

Apple updates still getting through

Highlighted
Kind of a big deal

Apple updates still getting through

I have always blocked iOS updates ever since 11.0 came out and slammed all my Internets.

 

I follow the guide from here: https://documentation.meraki.com/zGeneral_Administration/Other_Topics/Blocking_or_rate_limiting_iOS_...

 

However, I have noticed of late that I still see devices performing updates, but it would appear that they are using a new URL to do so.

 

updates-http.cdn-apple.com

 

Anyone else seeing this?


I don't have the ability to test this myself to confirm if we now need to add this 3rd URL to the above 2 mentioned in the article.

Nolan Herring | nolanwifi.com
TwitterLinkedIn
3 REPLIES 3
Highlighted
Kind of a big deal

Re: Apple updates still getting through

That certainly looks like a valid URL since it's going to aaplimg.com. I do suspect that blocking it would break other Apple services however. 

MRCUR | CMNO #12
Highlighted
Kind of a big deal

Re: Apple updates still getting through

I have previously used a L7 firewall rule on guest WiFi.  I haven't tested it recently to see it it still blocks the Apple updates, but it certainly used to.

 

Screenshot from 2018-10-05 09-54-37.png

Highlighted
Kind of a big deal

Re: Apple updates still getting through

Bear in mind that software updates come via the Mac App store, turning this off would also affect the machine being able to access the App store. It could also affect iTunes as well. 

Meraki CMNO, Ruckus WISE, Sonicwall CSSA, Allied Telesis CASE & CAI
Welcome to the Meraki Community!
To start contributing, simply sign in with your Cisco account. If you don't yet have a Cisco account, you can sign up.