iOS - ports / sites to allow for an update

[fconte]

Hello,
Behind a firewall, which ports / sites to allow for an update to IOS
Thank you for your help

[bpavlov]

https://support.apple.com/en-us/HT203609

[jarednichols]

HT203609 is just for APNs. iOS software updates do not occur over APNs but rather normal HTTP/S.

Critically, a device will need to look at mesu.apple.com over HTTP to see if there's an available update. That's the site where we host the update catalog files and how a device will compare what it has on-board to what's available.

To get the update files themselves after verifying with mesu.apple.com that an update is available, they'll need to be able to reach appldnld.apple.com which will then redirect to our global CDN based upon where you are on the globe.

[scottc98]

"To get the update files themselves after verifying with mesu.apple.com that an update is available, they'll need to be able to reach appldnld.apple.com which will then redirect to our global CDN based upon where you are on the globe."

• Does anyone know the list of FQDNs that can be referenced for the redirect? Looking for a list for the United states as our security team would like for us to lock down to the exact FQDN/URL for updates.

Thanks in advance