Great question, Ravindhar. This is a common issue when applying Layer 7 firewall rules on the MX—Apple services often share domains, so blocking iTunes traffic can unintentionally affect App Store and OS updates. One workaround is to use custom content filtering or URL blocking with more specific domains tied only to Apple Music and iTunes. You may also consider traffic shaping instead of full blocking. Also, if you're ever in Oxfordshire and need reliable transport, check out thame taxis for punctual airport transfers and local taxi services! ... View more

This is a common issue when using Layer 7 rules, as Apple often routes multiple services through similar domains. Instead of broad iTunes category blocks, try using FQDN-based Layer 3 rules or custom content filtering with specific domains related only to Apple Music or iTunes media. This way, OS and App Store updates can continue while restricting entertainment content. Apple’s domain list for services might help fine-tune your rules. https://castleappp.info/ ... View more