Blocking Apple Software Restore (7800)

[raykau]

Hello I am running a FortiGate 300C with Firmware Version v5.0, build 0318 (GA Patch 12) in the Network

In the NetFlow stats on the network, I am seeing a huge amount of traffic (more than 30%) being used by Apple Software Restore (7800)

What do I need to do so that I can block this traffic absolutely?

If any one can advise on this will be much appreciated.

Please let me know if any further information is needed from my side.

Thanks in advance

[gschmitt]

raykau wrote:
Apple Software Restore (7800)

Is this just today? Because iOS 9.0.1 just got released yesterday ;)

[raykau]

HI

Thanks for your reply..

Have been seeing for the past week or so unfortunately. is there anyway this can be blocked without blocking facetime or imessage?

[gschmitt · Accepted solution]

raykau wrote:

Have been seeing for the past week or so unfortunately. is there anyway this can be blocked without blocking facetime or imessage?

I am unsure what Apple Software Restore is supposed to be in FortiNet context BUT you can use the following applications in an Application Control Profile[ul]

FaceTime

iMessage

Apple.Daily

Apple.Daily_Video

Apple.Game.Center

Apple.iOS.Push.Notification

Apple.Ipad

Apple.Iphone

Apple.Maps

Apple.Remote.Desktop

Apple.Software.Update

Apple.Store[/ul]

I would start by blocking Apple.Software.Update and see if that helps

[raykau]

Thanks will try that!