Apple App Store Connection Errors

Question

Hi There, 
 I have some weird problems with the Apple App Store on our Macbooks. Some colleagues can use the store without any problems, others can not open it at all. There are they same firewall rules that apply to all users, regardless of whether they are WiFi or LAN. I have already set exceptions in the web policy, and put all the URLs from the Apple article into a firewall rule where the IPS is disabled. https://support.apple.com/de-de/HT201999 
 Please have a look at my screenshots. The Problem is also, that I can't see any errors at the log viewer or with paket capture whan a colleague try's to download something at the store. 
 Any ideas?

WiFi Clients are in the same zone like LAN.

LuCar Toni · Answer

Do you use separate zone or bridge to AP LAN? 
 Can you try Bridge to AP LAN and reproduce the issue? 
 If the issue only exist in Separate zone, verify, you are running V17.5 and delete / recreate the separate zone.

Daniel Bingham · Answer

The following worked for me. 
 Create a new User/Network rule at the top: 
 Rule Name Apple Services 
 Source Zone: LAN 
 Source Networks and Devices (either add selected devices or choose any) 
 Destination zones: WAN 
 Destination Networks 
 Choose Apple Services (should be inbuilt) 
 Create Apple .aaplimg Services as FQDN host: *.aaplimg.com 
 You may need to create another FQDN Host for Akamai: *.akamaitechnologies.com 
 Don't check any web malware and content scanning 
 Don't turn on any advanced settings leave them all as None (IPS, Web, App) 
 
 This resolved my problem... UP UNTIL SFVH (SFOS 17.5.7 MR-7) - Will be rolling back to MR-6 later.