Apple continuity & SSL Engine

Hi,

I have all Apple functions working via a specific rule which only allows access to Apple FQDN sites (IP4 only, IPv6 XG currently does not support FQDNs) using specific ports.

Ian

Hi,

I have all Apple functions working via a specific rule which only allows access to Apple FQDN sites (IP4 only, IPv6 XG currently does not support FQDNs) using specific ports.

Ian

Hi, sound‘s good- and you have SSL/TLS engine activated?

Can you give me a more detailed „hint“ how your rule looks like?

Thanks!

Hi,

I will post a full copy of the rule and the apple fqdns tomorrow morning my time.

ian

Thanks!!

Hi Martin,

I will post the screenshots over a couple of posts.

ian

Second in the series.

ian

third in the series.

I also use the select users function so that only apple devices can use the firewall rule. I have all my devices identified as clienteles users.

If you are using IPv6 and trying to block VPNs and tunnels etc, the FQDNs does not wrk in IPv6 rules with v18.0.3 mr-3.

Ian