iTunes blocked

[Tsonga]

iTunes seems to be working ok on my PC with the exception

That confirms that it is smoothwall playing silly buggers. I'd ring smoothwall back and insist on speaking with someone, you know EXACTLY what you are trying to achieve and for them its a 5 min job. Download their teamviewer client and be good to go. Either take your IP out of the exception or have another machine to hand for testing .

[One_Minute_Hero]

That confirms that it is smoothwall playing silly buggers. I'd ring smoothwall back and insist on speaking with someone, you know EXACTLY what you are trying to achieve and for them its a 5 min job. Download their teamviewer client and be good to go. Either take your IP out of the exception or have another machine to hand for testing .

when i last phoned on friday (just before i left) i was told it had been escalated. am just awaiting office hours and will call again. cheers

[One_Minute_Hero]

If you are using Smoothwall, Please configure the following:

Browse to Web proxy > Authentication > Exceptions

Add the following categories to Auth exceptions:

SSL/CRL
Software Updates
Authentication Exceptions
iTunes

Save.

Browse to Guardian > Web Filter > Policy Wizard

Create a policy with the following conditions:

Who: Everyone
What: Authentication Exceptions, SSL/CRL, Software Updates, itunes
Action: Whitelist
Where: Everywhere
When: Always
Action: Enabled

Confirm and save this rule.

Browse to Guardian > Web Filter > Policies

Move the policy you created up the table until it is above any block or blanket block in place for the group Unauthenticated IPs. You may have this group in a policy folder in position 2 in the table by default if you did not have Unauthenticated IPs allowed to use the web proxy prior to migrating. If this is a fresh install please check whether Unauthenticated IPs is included in the aforementioned policy folder.

Please then edit the 'Recommended security rules' content modification category group and remove 'IE remote code execution'.

Save and restart the web proxy.

i missed this step

working now

thanks all

[AMLightfoot]

Yes, the WHITELIST action is vitally important - this is a commonly misunderstood configuration. Whitelisting bypasses content scanning and any content modification rules which can interfere with the iTunes traffic which explains why it doesn't work with an 'Allow' rule but does with a Whitelist rule.