The Fortinet FortiGate categorizes various domains based on their functionalities and the type of content they serve. Domains associated with iCloud services are categorized under "Proxy Avoidance" mainly because of the functionality iCloud offers.
Here are a few reasons:
-
iCloud Drive: iCloud Drive can be used to store any data, and once the data is uploaded to iCloud, it can be accessed from anywhere, potentially bypassing corporate or school content filters and restrictions.
-
iCloud Web Apps: With web-based versions of Pages, Numbers, Keynote, etc., users can upload, edit, and download content, again potentially bypassing restrictions.
-
Shared Albums and iCloud Photos: These allow for content sharing and can also be accessed via web browsers.
-
iCloud.com: It provides web-based access to multiple Apple services including Mail, Contacts, Calendar, Photos, iCloud Drive, and more.
-
VPN-Like Functionality: Certain features, like iCloud Private Relay (introduced in iOS 15), function similarly to a VPN by encrypting a user's web traffic and routing it through two separate internet relays, making it difficult for outsiders to intercept or view.
Due to these functionalities, in a controlled environment like a corporate network, school, or a public institution, it's a concern that users might utilize these services to bypass network restrictions, share unauthorized content, or access restricted content. As a result, they are categorized under "Proxy Avoidance" to give network administrators an option to restrict or monitor the usage of these services.
If this categorization causes an issue or if certain essential services are getting blocked, network administrators can customize the web filter profiles in their FortiGate units to allow specific domains or URLs as needed.
Siddhanth Poojary
