Few devices are not able to get the latest released MacOS update when connected with internal corporate network. Can anybody tell us which all things need to be whitelisted in order to get the devices updated with Apple update server directly. Thanks!
Question
MacOS Update Scan Failed
+10Hej
Download Mac Evaluation Utility from https://appleseed.apple.com/it
Apple dont allow you to SSL inspect where network trafik.
+26As @RaxiaDK suggested, I'd probably start with MAU. However, there are also some other tools like JET and Jamf Check that provide similar information, though MAU is generally better.
As far as what you need to allow, Apple provides the list of hosts and ports on the link below. The tools above will tell you what is being caught up in a TLS filter and need to be bypassed.
+7One thing I've seen in customer environments is that some genius has configured an apple content cache somewhere which isn't working properly, that clients detect automatically. Check if that's the case from an affected computer with the following command: AssetCacheLocatorUtil
If that's the case, the best way to block it is to block DNS for the record that's used for clients to register. If that's not possible or desirable, the next best option is to disable content caching via JAMF/MDM policy, but the drawback there is that all potential content cache computers need to be managed by your MDM.
Enter your E-mail address. We'll send you an e-mail with instructions to reset your password.