search cancel

Unable to Authenticate iTunes desktop application through the ProxySG

book

Article ID: 174196

calendar_today

Updated On:

Products

Advanced Secure Gateway Software - ASG ProxySG Software - SGOS

Issue/Introduction

Unable to Authenticate iTunes desktop application through the ProxySG. 

In the iTunes application, when trying to authorize an account, the user cannot send the username/passord through the ProxySG.

Suggestions in the below Symantec KB articles were followed and did not produce a successful result:

TECH242252

TECH240855

TECH242527

TECH241506

Also, tried allowing domains from this Apple article, which was not successful:

Resolution

Add this to the Content Policy Language (CPL) Local file or to a CPL Layer in the Visual Policy Manager (VPM):

<Proxy>
request.header.User-Agent="iTunes" authenticate(no) detect_protocol(none) allow

The CPL code above matches on traffic coming from iTunes, proxy does not require the traffic to be authenticated, and proxy will not attempt to recognize the protocol to send for further inspection.