iOS APP Store - blocking app store access

[Ravindhar]

Hi,

When using restrictive Layer 7 firewall rules for denied iTunes Music&Video traffic on the MX Security Appliance, services such as Apple App-store inadvertently blocked.

So that we are unable to Install App updates and OS Updates.

We want block iTunes for entertainment Purpose.

is there any solution to block iTunes entertainment purpose instead of OS and App Updates?.  

Regards,

Ravindhar.

[BrechtSchamp · Accepted solution]

Maybe you can get it to work by going through the urls in this page and whitelisting the ones that related to app updates:

https://support.apple.com/en-us/HT210060

Another thing you could do is just rate limiting instead of outright blocking.

[patcummins]

This is a common issue when using Layer 7 rules, as Apple often routes multiple services through similar domains. Instead of broad iTunes category blocks, try using FQDN-based Layer 3 rules or custom content filtering with specific domains related only to Apple Music or iTunes media. This way, OS and App Store updates can continue while restricting entertainment content. Apple’s domain list for services might help fine-tune your rules.
https://castleappp.info/

[patcummins]

Great question, Ravindhar. This is a common issue when applying Layer 7 firewall rules on the MX—Apple services often share domains, so blocking iTunes traffic can unintentionally affect App Store and OS updates. One workaround is to use custom content filtering or URL blocking with more specific domains tied only to Apple Music and iTunes. You may also consider traffic shaping instead of full blocking.

Also, if you're ever in Oxfordshire and need reliable transport, check out thame taxis for punctual airport transfers and local taxi services!

[faffs]

Valkyries Inaugural 2025 Nike Explorer Uniforms Presently Out there at Valkyries Retail store. Laeticia Amihere Jersey