Security

last person joined: yesterday 

Forum to discuss Enterprise security using HPE Aruba Networking NAC solutions (ClearPass), Introspect, VIA, 360 Security Exchange, Extensions, and Policy Enforcement Firewall (PEF).
Back to discussions
Expand all | Collapse all

2017 Google Play Store URL whitelist

This thread has been viewed 6 times

  • 1.  2017 Google Play Store URL whitelist

    Posted Jan 12, 2017 12:17 AM

    Has anyone got an up to date URL whitelist for Google Play store?

    Trying to setup a captive portal whitelist to allow download of Quickconnect for Android Onboarding :)



  • 2.  RE: 2017 Google Play Store URL whitelist
    Best Answer

    EMPLOYEE
    Posted Jan 12, 2017 12:20 AM
    It hasn't changed in a while:

    netdestination GOOGLE-PLAY
    name *.ggpht.com
    name *.play.googleapis.com
    name android.clients.google.com
    name www.googleapis.com
    name *.gvt1.com
    !


  • 3.  RE: 2017 Google Play Store URL whitelist

    Posted Jan 12, 2017 12:51 AM

    Thanks Tim!

     

    Is there anything else required for the pre-auth role in Instant that the below for this to work?

     

    wlan walled-garden
    white-list "*.ggpht.com"
    white-list "android.clients.google.com "
    white-list "*.gvt1.com"
    white-list "*.play.googleapis.com"
    white-list "www.googleapis.com"

     

    wlan access-rule pre-auth
    captive-portal external profile clearpass
    rule any any match any any any deny

     



  • 4.  RE: 2017 Google Play Store URL whitelist

    Posted Jan 31, 2017 04:36 AM

    Hi,

     

    Did this whitelist work?

     

    I ended up using this....

    from Cisco's trustsec guide, you can do it per IP block:

    74.125.00/16 173.194.0.0/16 TCP/UDP:5228 TCP/UDP:8889

    source: http://www.cisco.com/c/dam/en/us/solutions/collateral/enterprise/design-zone-security/howto_61_byod_provisioning.pdf



  • 5.  RE: 2017 Google Play Store URL whitelist

    Posted Jan 31, 2017 02:15 PM

    I wasn't able to get it working with my test phone, but it was running Gingerbread so it could need additional URLs...



  • 6.  RE: 2017 Google Play Store URL whitelist

    Posted May 02, 2018 12:15 AM

    I'm trying to figure out if there's a way to block downloading of apps from Google/Apple store - except a few whitelisted apps. This is for guest users connecting to the guest wi-fi via an Andoid/iOS phone.



  • 7.  RE: 2017 Google Play Store URL whitelist

    EMPLOYEE
    Posted May 02, 2018 12:20 AM
    No. That's not possible


  • 8.  RE: 2017 Google Play Store URL whitelist

    Posted May 02, 2018 12:26 AM

    Thanks Tim for the prompt response - much appreciated. I wonder if the ClearPass product is the best fit for an app control scenario like this... 



  • 9.  RE: 2017 Google Play Store URL whitelist

    EMPLOYEE
    Posted May 02, 2018 12:28 AM
    ClearPass is not an enforcement point. It's a policy engine.


  • 10.  RE: 2017 Google Play Store URL whitelist

    Posted May 02, 2018 12:47 AM

    Got it. Many thanks, Tim. 



  • 11.  RE: 2017 Google Play Store URL whitelist
    Best Answer

    EMPLOYEE
    Posted Jan 12, 2017 12:20 AM
    It hasn't changed in a while:

    netdestination GOOGLE-PLAY
    name *.ggpht.com
    name *.play.googleapis.com
    name android.clients.google.com
    name www.googleapis.com
    name *.gvt1.com
    !