iTunes Web Addresses

[enjay]

Our authenticating proxy server won't let anyone connect to iTunes Store, so I'm trying to set it to bypass the filters but I'm struggling to find the domain(s) in question. Any ideas?

[Arthur]

I think these are the domains...

 

itunes.apple.com
ax.itunes.apple.com
ax.init.itunes.apple.com
albert.apple.com
gs.apple.com
ax.phobos.apple.com.edgesuite.net
mzstatic.com

 

Source: Apple

[enjay]

Think that got it, thanks Arthur.

 

Is it sad or just evidence of it being Friday afternoon, that I've put your location into Google Maps to see where you are. A little surprised by the result though...

[tom_newton]

FWIW Smoothwall users should have an "itunes" category for just such an eventuality

[Arthur]

Is it sad or just evidence of it being Friday afternoon

It must be because it's Friday. I'll have to update my location because I'm not there yet.

[AMLinington]

Using apples iTunes Support Knowledge base (found at iTunes: Troubleshooting security software issues )

 

Try adding apple.com to the bypass. icloud.com too.

 

Had to remove the list I'm afraid.

Edited June 6, 2012 by AMLinington
REDACTING DOCUMENT

[kennysarmy]

FWIW Smoothwall users should have an "itunes" category for just such an eventuality

 

Hi Tom,

 

I am getting "proxy authentication required" messages when I open Itunes on my PC - using an admin account.

 

I've created a policy on the smoothwall box:

Who : Admins

What : Itunes

Where : Everywhere

When : Always

Action : Allow

 

I still get prompted however - have I done something wrong or misunderstood the option?

[kennysarmy]

Screenshot

[AMLinington]

You need to add the itunes category to web proxy > authentication > excecptions.

 

Then edit that allow rule to be:

 

Who : Unauthenticated IP's

What : Itunes

Where : Everywhere

When : Always

Action : Whitelist

[kennysarmy]

Thanks.

 

In Web proxy » Authentication » Exceptions I cannot see an edit rule option - where is that please?

[AMLinington]

There is no edit rule. You simply add the category to authentication exceptions, then edit the rule in your Guardian Web Filter policies. So the auth exceptions are configured in 2 locations - web proxy > auth > exceptions to tell the proxy to exclude categories from being authenticated, then the web filter policy whitelist to tell Guardian that those sites are allowed through without authentication.

[kennysarmy]

Sorted it thanks.

 

I had

Who : ADMINS (not Unauthenticated IP's)

What : Itunes

Where : Everywhere

When : Always

Action : Whitelist

[HarryMonkey]

Here's what we did to get round this. It's taken from something that was put in a Yorks grid forum (I think) ...

 

 

Under guardian » policy objects » user defined, create a custom category called "iTunes Extra Sites" and added the following URLs:

 

mzstatic.com

pri.kts-af.net

metrics.apple.com

appldnld.apple.com

securemetrics.apple.com

apple.com

 

Next, go to guardian » policy objects » category groups and create an "iTunes" group and tick Multimedia » iTunes [beta] and Custom Categories » iTunes Extra Sites and click Save.

 

Next, go to guardian » web filter policies » manage policies and create the following Policy and move it to the number 1 spot:

 

Everyone, iTunes (the category group you have just added), Everywhere, Always, Whitelist

 

Next, under web proxy » authentication » exceptions, add the iTunes category group you created.

 

 

Please Note: The above guide maybe completely invalid after a certain amount of time as Apple change

the iTunes URL's regularly (which is why the iTunes category has never made it out of Beta stages).