Find My iPad - Smoothwall

[steveg]

Random one, but I can't turn off find my iPad on any devices when they are connected through our smoothwall.  

 

All other apple stuff works, logging in etc, apple urls are set to bypass ssl inspection, and realtime log shows nothing being blocked.  Just doing domain capture so need to transfer apple accounts across and this keeps failing for this reason.

 

Can anyone else turn off find my iPad through a smoothwall filtered connection?  Never had a problem before so not sure if this is a recent thing?  

 

Hotspot off my phone and it works fine.  

[tom_newton]

Not something I have seen - usually problems are with long running connections for this sort of thing, but I cant imagine that's the case. FW rather than filter, perhaps?

[steveg]

It's really odd, I also get a connection error going to icloud.com on my pc.

 

Our local smoothwall is in bridge mode, there are other appliances at the LA but we bypass those, although I do have access to an unfiltered proxy - when I use this proxy it works fine, can't really deploy this to all staff though!

 

I've added all the apple urls manually to our group that does not have https inspection, as well as setting the icloud and apple groups on the smoothwall to bypass filtering. 

 

Checking the SSL cert in edge on the icloud site when I get the error shows it was issued to apple, so smoothwall isn't intercepting and using its own certificate.

 

Realtime webfilter monitor on the smoothwall for my ip shows nothing when trying to access icloud.  

 

It's quite frustrating! 

[steveg]

Finally figured it out, not entirely sure why it fixed it but it has.  

 

I had apples ip range set as a destination exception.  Removing this fixed the issue.

[tom_newton]

Quite possibly allowing the traffic to hit the proxy (rather than just be bridged) means its source IP is probably more palatable to something upstream

 

Edit: I am going to claim a win on "firewall problem" BTW