JSS Proxy

[squier15]

We are running into an issue using the App Store Search within the JSS. Our searches time out because they are not able to to get out since our firewall is blocking the request. We were able to open the 17.x.x.x block for the APN to function and I found that we need to open the below for the App Store. The problem is we have to use IP's only for our firewall changes so we can't just add the addresses and since these are Akamai, managing this list of IP's would be next to impossible. Our network team suggested routing the app search traffic through our proxy instead. JAMF suggested I post this to you all to see how others manage this. Can APN and App Search traffic be routed so APN is direct still but App-Search goes through the proxy?

itunes.apple.com
ax.itunes.apple.com
albert.apple.com
gs.apple.com

Thanks for any input!

[colonelpanic]

This is exactly how we do it. The apns stuff is configured to go through the firewall directly by adding the IP address range to the bypass list on the proxy tab in System Preferences. All other generic traffic will go through the proxy.

[squier15]

Thanks!