Security

Reply
Frequent Contributor I

2017 Google Play Store URL whitelist

Has anyone got an up to date URL whitelist for Google Play store?

Trying to setup a captive portal whitelist to allow download of Quickconnect for Android Onboarding :)

Guru Elite

Re: 2017 Google Play Store URL whitelist

It hasn't changed in a while:

netdestination GOOGLE-PLAY
name *.ggpht.com
name *.play.googleapis.com
name android.clients.google.com
name www.googleapis.com
name *.gvt1.com
!

Tim Cappalli | Aruba Security
@timcappalli | timcappalli.me | ACMX #367 / ACCX #480
Guru Elite

Re: 2017 Google Play Store URL whitelist

It hasn't changed in a while:

netdestination GOOGLE-PLAY
name *.ggpht.com
name *.play.googleapis.com
name android.clients.google.com
name www.googleapis.com
name *.gvt1.com
!

Tim Cappalli | Aruba Security
@timcappalli | timcappalli.me | ACMX #367 / ACCX #480
Frequent Contributor I

Re: 2017 Google Play Store URL whitelist

Thanks Tim!

 

Is there anything else required for the pre-auth role in Instant that the below for this to work?

 

wlan walled-garden
white-list "*.ggpht.com"
white-list "android.clients.google.com "
white-list "*.gvt1.com"
white-list "*.play.googleapis.com"
white-list "www.googleapis.com"

 

wlan access-rule pre-auth
captive-portal external profile clearpass
rule any any match any any any deny

 

New Contributor

Re: 2017 Google Play Store URL whitelist

Hi,

 

Did this whitelist work?

 

I ended up using this....

from Cisco's trustsec guide, you can do it per IP block:

74.125.00/16 173.194.0.0/16 TCP/UDP:5228 TCP/UDP:8889

source: http://www.cisco.com/c/dam/en/us/solutions/collateral/enterprise/design-zone-security/howto_61_byod_provisioning.pdf

Frequent Contributor I

Re: 2017 Google Play Store URL whitelist

I wasn't able to get it working with my test phone, but it was running Gingerbread so it could need additional URLs...

New Contributor

Re: 2017 Google Play Store URL whitelist

I'm trying to figure out if there's a way to block downloading of apps from Google/Apple store - except a few whitelisted apps. This is for guest users connecting to the guest wi-fi via an Andoid/iOS phone.

Guru Elite

Re: 2017 Google Play Store URL whitelist

No. That's not possible

Tim Cappalli | Aruba Security
@timcappalli | timcappalli.me | ACMX #367 / ACCX #480
New Contributor

Re: 2017 Google Play Store URL whitelist

Thanks Tim for the prompt response - much appreciated. I wonder if the ClearPass product is the best fit for an app control scenario like this... 

Guru Elite

Re: 2017 Google Play Store URL whitelist

ClearPass is not an enforcement point. It's a policy engine.

Tim Cappalli | Aruba Security
@timcappalli | timcappalli.me | ACMX #367 / ACCX #480
Search Airheads
cancel
Showing results for 
Search instead for 
Did you mean: