Solved

Block iTunes Updates on Firewall

Posted on 2011-03-03
3
1,098 Views
Last Modified: 2012-06-22
Hi all,

We curerntly have a client who we're doing a Windows 7 deployment via SCCM.

One of the issues we're facing is the constant iTunes program updates.  We would like to know if there is a way of blocking the url or IP address on the firewall (ASA) that it connects to in order to search for new iTunes versions?

Any help would be greatly appreciated.

0
Comment
Question by:jj_actps
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
3 Comments
 
LVL 33

Accepted Solution

by:
MikeKane earned 250 total points
ID: 35033411
You could certainly block apple updates at the firewall level by denying access to that external IP range.   This would block all apple updates.  

Using DNS you could redirect swscan.apple.com to 127.0.0.1 so that the machines never resolve to the update resource.  

If you are looking to have all updates, except itunes work, this would be beyond the ASA's abilities.  
0
 
LVL 27

Expert Comment

by:Tolomir
ID: 35034136
Is there any reason that your client needs itunes?

Blocking security updates is not recommended. Really. It's better to make sure itunes is not used.

I would log all clients that request this url and uninstall the software to resove the issue.
0
 

Author Closing Comment

by:jj_actps
ID: 35750892
.
0

Featured Post

U.S. Department of Agriculture and Acronis Access

With the new era of mobile computing, smartphones and tablets, wireless communications and cloud services, the USDA sought to take advantage of a mobilized workforce and the blurring lines between personal and corporate computing resources.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

The conference as a whole was very interesting, although if one has to make a choice between this one and some others, you may want to check out the others.  This conference is aimed mainly at government agencies.  So it addresses the various compli…
This article is in regards to the Cisco QSFP-4SFP10G-CU1M cables, which are designed to uplink/downlink 40GB ports to 10GB SFP ports. I recently experienced this and found very little configuration documentation on how these are supposed to be confi…
Email security requires an ever evolving service that stays up to date with counter-evolving threats. The Email Laundry perform Research and Development to ensure their email security service evolves faster than cyber criminals. We apply our Threat…
The Email Laundry PDF encryption service allows companies to send confidential encrypted  emails to anybody. The PDF document can also contain attachments that are embedded in the encrypted PDF. The password is randomly generated by The Email Laundr…

635 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question