Skip to main content
raykau
raykau
New Member
September 30, 2015
Solved

Blocking Apple Software Restore (7800)

  • September 30, 2015
  • 4 replies
  • 6607 views

Hello I am running a FortiGate 300C with Firmware Version v5.0, build 0318 (GA Patch 12) in the Network

In the NetFlow stats on the network, I am seeing a huge amount of traffic (more than 30%) being used by Apple Software Restore (7800)

 

What do I need to do so that I can block this traffic absolutely?

 

If any one can advise on this will be much appreciated.

Please let me know if any further information is needed from my side.

 

Thanks in advance

 

 

    Best answer by gschmitt

    raykau wrote:

    Have been seeing for the past week or so unfortunately. is there anyway this can be blocked without blocking facetime or imessage?

    I am unsure what Apple Software Restore is supposed to be in FortiNet context BUT you can use the following applications in an Application Control Profile

    [ul]
  • FaceTime
  • iMessage
  • Apple.Daily
  • Apple.Daily_Video
  • Apple.Game.Center
  • Apple.iOS.Push.Notification
  • Apple.Ipad
  • Apple.Iphone
  • Apple.Maps
  • Apple.Remote.Desktop
  • Apple.Software.Update
  • Apple.Store[/ul]

    I would start by blocking Apple.Software.Update and see if that helps

    • 4 replies

    gschmitt
    gschmitt
    New Member
    October 1, 2015

    raykau wrote:
    Apple Software Restore (7800)

    Is this just today? Because iOS 9.0.1 just got released yesterday ;)

    raykau
    raykauAuthor
    New Member
    October 1, 2015

    HI

     

    Thanks for your reply..

     

    Have been seeing for the past week or so unfortunately. is there anyway this can be blocked without blocking facetime or imessage?

    gschmitt
    gschmittAnswer
    New Member
    October 1, 2015

    raykau wrote:

    Have been seeing for the past week or so unfortunately. is there anyway this can be blocked without blocking facetime or imessage?

    I am unsure what Apple Software Restore is supposed to be in FortiNet context BUT you can use the following applications in an Application Control Profile

    [ul]
  • FaceTime
  • iMessage
  • Apple.Daily
  • Apple.Daily_Video
  • Apple.Game.Center
  • Apple.iOS.Push.Notification
  • Apple.Ipad
  • Apple.Iphone
  • Apple.Maps
  • Apple.Remote.Desktop
  • Apple.Software.Update
  • Apple.Store[/ul]

    I would start by blocking Apple.Software.Update and see if that helps

    • Terms & ConditionsAccessibility statement
    Thought Leadership Security Summit. Outpace New Threats with AI - enhanced defense. Tuesday, Septmeber 15, 8:30 AM - 2:30 PM PT. The Golf Club at Newcastle, WA.
    Virtual event | September 2026. SASE summit. The age of autonomous trust. Register here!