Users cannot download software updates from the Apple App Store

Products

• ProxySG Software - SGOS

Issue/Introduction

Users cannot download software updates from the Apple App Store.

This occurs on Mac OS X v10.9 Mavericks, which now uses the Apple App Store to download software updates. The App Store does not trust the certificate the ProxySG appliance issues for SSL interception and thus cannot download updates.

Resolution

Disable SSL interception for the Apple App Store.

1. In the Visual Policy Manager (VPM), go to the SSL Intercept layer.
2. Create a rule at the top of the layer with the following settings:
   • Source:  Any
   • Destination:
     • Server Cert: itunes (contains)
     • Server Cert: securemetrics.apple.com   
     • Server Cert: swscan.apple.com
     • Server Cert: mzstatic.com (At End)
   • Action:  Disable SSL Interception
3. Install policy.