Exceptions: Latest Apple iOS update

Apple has recently updated its update delivery infrastructure. Please see the link for all the information from Apple. https://support.apple.com/en-us/HT201999

To get the iOS updates flowing through your XG, the existing in-built Apple Update exceptions will not work. To guard from being overwritten I duplicated the existing "Apple Update" exception policy and added this additional exception. 

^([A-Za-z0-9.-]*\.)?cdn\-apple\.com

I've made these additions and still having issues.  Investigating but I expect it's IPS (currently blocking High Risk 4/5).

Hi,

please refer to this thread.

https://community.sophos.com/products/xg-firewall/f/firewall-and-policies/108190/mojave-and-the-new-news-application

Ian

Since adding the extra lines, I have been able to remove some of the bypass just leaving HTTPS and policy intact.