Block iTunes IOS updates on iphones with Cisco AVC

[David James]

Is it possible to block iphones from accessing and downloading any iphone/ipad IOS updates utilizing Cisco AVC? We are looking for a way to minimize traffic by limiting access or at least controlling IOS updates from saturating WAN traffic.  We currently are on Cisco 8510 controllers running 7.4 with Cisco Prime 1.4.

[tony.sangha]

You could apply an ACL to the WLAN, if you know the port and destination they are trying to contact. Alternatively if you have WLC 7.5 you could try using a NBAR protocol pack and see if contains any enhancements to the applications it can classifiy for iPhone.

[Leo Laohoo]

Be careful with what you are asking.  Blocking iTunes traffic can be "disruptive" to your management.  It will not just block updates but will block EVERYTHING.

If you still want to go down this path, then I'd recommend you look at Active Directory.  You can permit or deny a swath of people from opening up iTunes (but allowing upper management).

[Leo Laohoo]

Well known TCP and UDP ports used by Apple software products