Block iTunes Updates on Firewall

Hi all,

We curerntly have a client who we're doing a Windows 7 deployment via SCCM.

One of the issues we're facing is the constant iTunes program updates.  We would like to know if there is a way of blocking the url or IP address on the firewall (ASA) that it connects to in order to search for new iTunes versions?

Any help would be greatly appreciated.

jj_actpsAsked:
Who is Participating?
 
MikeKaneConnect With a Mentor Commented:
You could certainly block apple updates at the firewall level by denying access to that external IP range.   This would block all apple updates.  

Using DNS you could redirect swscan.apple.com to 127.0.0.1 so that the machines never resolve to the update resource.  

If you are looking to have all updates, except itunes work, this would be beyond the ASA's abilities.  
0
 
TolomirAdministratorCommented:
Is there any reason that your client needs itunes?

Blocking security updates is not recommended. Really. It's better to make sure itunes is not used.

I would log all clients that request this url and uninstall the software to resove the issue.
0
 
jj_actpsAuthor Commented:
.
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.