If you’re Netskope account isn’t updated to the most recent steering configuration, the macOS upgrade process might be interrupted. Apple uses a set of URLs for OS upgrades, and if these URLs are not bypassed by the Netskope Client, the OS upgrade process fails. If you add Apple URLs as domain exceptions in your steering configuration, the Netskope Client bypasses the URLs. These exceptions are only applicable for Apple Devices (from M1 Big Sur version 11.3.1 to latest). Any new and updated steering configurations contain these exceptions so you don’t have to add the macOS exceptions.
To add Apple URLs as domain exceptions in your steering configuration:
-
Go to Settings > Security Cloud Platform > Steering Configuration.
-
Click
for Default tenant config. -
Click View Exceptions.
-
Click New Exception and then Domains.
-
In the New Exception window, under Exception Type, enter the following URLs:
-
ws-ee-maidsvc.icloud.com
-
*.cdn-apple.com
-
cdn-apple.com
-
mzstatic.com
-
p37-caldav.icloud.com
-
gateway.icloud.com
-
metrics.icloud.com
-
setup.icloud.com
-
*.apple.com
-
apple.com
You can encounter one of the following alerts while accessing Apple websites from the Safari browser if in case you do not add Apple domain exceptions in the steering configuration:
-
Certificate alert. To proceed further, click OK.
-
Page not available alert. Add exceptions to access the website again.
-
-
Click Add.
The Netskope Client syncs steering configuration updates every 60 minutes. After the Netskope Client syncs the updates, Netskope bypasses the Apple URLs and allows the device OS upgrades.