topic Re: iCloud- Base App ID in General Topics

iCloud- Base App ID

SubaMuthuram — Wed, 17 Aug 2022 04:10:35 GMT

Hi Team,

We are unable to see iCloud-uploading and iCloud-downloading Apps in our traffic logs, All the traffic identified as iCloud-base.

Can someone help me on this ?

Re: iCloud- Base App ID

kiwi — Thu, 18 Aug 2022 13:28:02 GMT

Hi @SubaMuthuram ,

It might seem silly but are you decrypting the traffic successfully ?

Best,

-Kiwi.

Re: iCloud- Base App ID

SubaMuthuram — Fri, 19 Aug 2022 07:53:05 GMT

Hi @kiwi ,

We are successfully decrypting traffic and we are able to block the upload through file-blocking. but only issue with the App-ID.

Re: iCloud- Base App ID

BPry — Fri, 19 Aug 2022 15:43:51 GMT

@SubaMuthuram,

I would honestly expect this and I wouldn't expect to ever see iCloud-uploading or iCloud-downloading. The reason for this is that the firewall actually has built-in decryption exclusions for a lot of Apple domains including iCloud. Unless you disable those default exceptions (which will break Apple services due to cert-pinning and client certificates) I wouldn't expect to actually see either of these identified properly anymore.

Re: iCloud- Base App ID

SubaMuthuram — Mon, 22 Aug 2022 03:39:45 GMT

Ho @BPry,

We have excluded the iCloud from the Default decryption exclusion. After that only we are able to block the uploading through file blocking.