Security

Reply
Frequent Contributor I
Posts: 83
Registered: ‎09-08-2015

2017 Google Play Store URL whitelist

Has anyone got an up to date URL whitelist for Google Play store?

Trying to setup a captive portal whitelist to allow download of Quickconnect for Android Onboarding :)

Guru Elite
Posts: 8,191
Registered: ‎09-08-2010

Re: 2017 Google Play Store URL whitelist

It hasn't changed in a while:

netdestination GOOGLE-PLAY
name *.ggpht.com
name *.play.googleapis.com
name android.clients.google.com
name www.googleapis.com
name *.gvt1.com
!

Tim Cappalli | Aruba ClearPass TME
@timcappalli | ACMX #367 / ACCX #480 / ACEAP / CWSP
Guru Elite
Posts: 8,191
Registered: ‎09-08-2010

Re: 2017 Google Play Store URL whitelist

It hasn't changed in a while:

netdestination GOOGLE-PLAY
name *.ggpht.com
name *.play.googleapis.com
name android.clients.google.com
name www.googleapis.com
name *.gvt1.com
!

Tim Cappalli | Aruba ClearPass TME
@timcappalli | ACMX #367 / ACCX #480 / ACEAP / CWSP
Frequent Contributor I
Posts: 83
Registered: ‎09-08-2015

Re: 2017 Google Play Store URL whitelist

Thanks Tim!

 

Is there anything else required for the pre-auth role in Instant that the below for this to work?

 

wlan walled-garden
white-list "*.ggpht.com"
white-list "android.clients.google.com "
white-list "*.gvt1.com"
white-list "*.play.googleapis.com"
white-list "www.googleapis.com"

 

wlan access-rule pre-auth
captive-portal external profile clearpass
rule any any match any any any deny

 

New Contributor
Posts: 3
Registered: ‎02-02-2016

Re: 2017 Google Play Store URL whitelist

Hi,

 

Did this whitelist work?

 

I ended up using this....

from Cisco's trustsec guide, you can do it per IP block:

74.125.00/16 173.194.0.0/16 TCP/UDP:5228 TCP/UDP:8889

source: http://www.cisco.com/c/dam/en/us/solutions/collateral/enterprise/design-zone-security/howto_61_byod_provisioning.pdf

Frequent Contributor I
Posts: 83
Registered: ‎09-08-2015

Re: 2017 Google Play Store URL whitelist

I wasn't able to get it working with my test phone, but it was running Gingerbread so it could need additional URLs...

Search Airheads
Showing results for 
Search instead for 
Did you mean: