+ Post New Thread
Results 1 to 13 of 13
Internet Related/Filtering/Firewall Thread, iTunes Web Addresses in Technical; Our authenticating proxy server won't let anyone connect to iTunes Store, so I'm trying to set it to bypass the ...
  1. #1
    enjay's Avatar
    Join Date
    Apr 2007
    Location
    Reading, Berkshire, UK
    Posts
    4,485
    Thank Post
    282
    Thanked 196 Times in 167 Posts
    Rep Power
    75

    iTunes Web Addresses

    Our authenticating proxy server won't let anyone connect to iTunes Store, so I'm trying to set it to bypass the filters but I'm struggling to find the domain(s) in question. Any ideas?

  2. #2


    Join Date
    Feb 2007
    Location
    51.405546, -0.510212
    Posts
    8,703
    Thank Post
    220
    Thanked 2,612 Times in 1,923 Posts
    Rep Power
    776
    I think these are the domains...

    Code:
    itunes.apple.com
    ax.itunes.apple.com
    ax.init.itunes.apple.com
    albert.apple.com
    gs.apple.com
    ax.phobos.apple.com.edgesuite.net
    mzstatic.com
    Source: Apple

  3. Thanks to Arthur from:

    enjay (1st June 2012)

  4. #3
    enjay's Avatar
    Join Date
    Apr 2007
    Location
    Reading, Berkshire, UK
    Posts
    4,485
    Thank Post
    282
    Thanked 196 Times in 167 Posts
    Rep Power
    75
    Think that got it, thanks Arthur.

    Is it sad or just evidence of it being Friday afternoon, that I've put your location into Google Maps to see where you are. A little surprised by the result though...

  5. #4


    tom_newton's Avatar
    Join Date
    Sep 2006
    Location
    Leeds
    Posts
    4,458
    Thank Post
    866
    Thanked 845 Times in 667 Posts
    Rep Power
    195
    FWIW Smoothwall users should have an "itunes" category for just such an eventuality

  6. #5


    Join Date
    Feb 2007
    Location
    51.405546, -0.510212
    Posts
    8,703
    Thank Post
    220
    Thanked 2,612 Times in 1,923 Posts
    Rep Power
    776
    Quote Originally Posted by enjay View Post
    Is it sad or just evidence of it being Friday afternoon
    It must be because it's Friday. I'll have to update my location because I'm not there yet.

  7. #6


    AMLightfoot's Avatar
    Join Date
    Feb 2011
    Location
    Hampshire, England
    Posts
    2,087
    Thank Post
    361
    Thanked 600 Times in 383 Posts
    Rep Power
    246
    Using apples iTunes Support Knowledge base (found at iTunes: Troubleshooting security software issues )

    Try adding apple.com to the bypass. icloud.com too.

    Had to remove the list I'm afraid.
    Last edited by AMLightfoot; 6th June 2012 at 03:07 PM. Reason: REDACTING DOCUMENT

  8. Thanks to AMLightfoot from:

    psydii (6th June 2012)

  9. #7
    kennysarmy's Avatar
    Join Date
    Oct 2005
    Location
    UK
    Posts
    1,285
    Thank Post
    80
    Thanked 45 Times in 31 Posts
    Rep Power
    30
    Quote Originally Posted by tom_newton View Post
    FWIW Smoothwall users should have an "itunes" category for just such an eventuality
    Hi Tom,

    I am getting "proxy authentication required" messages when I open Itunes on my PC - using an admin account.

    I've created a policy on the smoothwall box:
    Who : Admins
    What : Itunes
    Where : Everywhere
    When : Always
    Action : Allow

    I still get prompted however - have I done something wrong or misunderstood the option?

  10. #8
    kennysarmy's Avatar
    Join Date
    Oct 2005
    Location
    UK
    Posts
    1,285
    Thank Post
    80
    Thanked 45 Times in 31 Posts
    Rep Power
    30
    itunes.jpg
    Screenshot

  11. #9


    AMLightfoot's Avatar
    Join Date
    Feb 2011
    Location
    Hampshire, England
    Posts
    2,087
    Thank Post
    361
    Thanked 600 Times in 383 Posts
    Rep Power
    246
    You need to add the itunes category to web proxy > authentication > excecptions.

    Then edit that allow rule to be:

    Who : Unauthenticated IP's
    What : Itunes
    Where : Everywhere
    When : Always
    Action : Whitelist

  12. #10
    kennysarmy's Avatar
    Join Date
    Oct 2005
    Location
    UK
    Posts
    1,285
    Thank Post
    80
    Thanked 45 Times in 31 Posts
    Rep Power
    30
    Thanks.

    In Web proxy Authentication Exceptions I cannot see an edit rule option - where is that please?

  13. #11


    AMLightfoot's Avatar
    Join Date
    Feb 2011
    Location
    Hampshire, England
    Posts
    2,087
    Thank Post
    361
    Thanked 600 Times in 383 Posts
    Rep Power
    246
    There is no edit rule. You simply add the category to authentication exceptions, then edit the rule in your Guardian Web Filter policies. So the auth exceptions are configured in 2 locations - web proxy > auth > exceptions to tell the proxy to exclude categories from being authenticated, then the web filter policy whitelist to tell Guardian that those sites are allowed through without authentication.

  14. #12
    kennysarmy's Avatar
    Join Date
    Oct 2005
    Location
    UK
    Posts
    1,285
    Thank Post
    80
    Thanked 45 Times in 31 Posts
    Rep Power
    30
    Sorted it thanks.

    I had
    Who : ADMINS (not Unauthenticated IP's)
    What : Itunes
    Where : Everywhere
    When : Always
    Action : Whitelist

  15. #13

    HarryMonkey's Avatar
    Join Date
    Mar 2007
    Location
    Bedford
    Posts
    1,110
    Thank Post
    53
    Thanked 206 Times in 156 Posts
    Rep Power
    170
    Here's what we did to get round this. It's taken from something that was put in a Yorks grid forum (I think) ...


    Under guardian policy objects user defined, create a custom category called "iTunes Extra Sites" and added the following URLs:

    mzstatic.com
    pri.kts-af.net
    metrics.apple.com
    appldnld.apple.com
    securemetrics.apple.com
    apple.com

    Next, go to guardian policy objects category groups and create an "iTunes" group and tick Multimedia iTunes [Beta] and Custom Categories iTunes Extra Sites and click Save.

    Next, go to guardian web filter policies manage policies and create the following Policy and move it to the number 1 spot:

    Everyone, iTunes (the category group you have just added), Everywhere, Always, Whitelist

    Next, under web proxy authentication exceptions, add the iTunes category group you created.


    Please Note: The above guide maybe completely invalid after a certain amount of time as Apple change
    the iTunes URL's regularly (which is why the iTunes category has never made it out of Beta stages).

  16. Thanks to HarryMonkey from:

    AMLightfoot (17th September 2012)

SHARE:
+ Post New Thread

Similar Threads

  1. [Pics] The worst web address in the UK?
    By Dos_Box in forum Jokes/Interweb Things
    Replies: 7
    Last Post: 3rd October 2011, 03:53 PM
  2. [SIMS] Web Address Validation
    By Disease in forum MIS Systems
    Replies: 12
    Last Post: 23rd June 2011, 09:25 AM
  3. Outlook Web Access 2007 - Address Book Cache
    By _techie_ in forum Windows Server 2000/2003
    Replies: 1
    Last Post: 17th October 2010, 10:28 PM
  4. exempt web addresses from ISA Cache
    By timbo343 in forum Windows
    Replies: 5
    Last Post: 13th July 2007, 02:10 PM
  5. VMWare web interface address
    By Dos_Box in forum Thin Client and Virtual Machines
    Replies: 2
    Last Post: 6th April 2006, 10:26 AM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •