Security

I've been doing some testing with Lollipop and it appears that you will need to add an additional DNS entry to your Android netdestination in order for devices to be able to download QuickConnect from the Play Store.

You'll need to add:

*.l.googleusercontent.com

netdestination ND-GOOGLEPLAY
  name android.clients.google.com
  name *.l.googleusercontent.com
!

Why is *.ggpht.com not in there?

I wanted to restrict it down to the least number of entries and it completed the process without the entry. I think that may be used for certain elements of the play store UI which are not used because you are going directly to the application.

Thank you.

Some new developments here. This is my current working setup:

netdestination ND-GOOGLEPLAY
  name android.clients.google.com
  name *.gvt1.com
  name *.ggpht.com
!

android.clients.google.com hosts some required elements of the Play store

gvt1 hosts the actual application APK cache

ggpht hosts the application images in play store

Do you have any updated entries?

Thanks,

https://github.com/aruba/clearpass-cloud-service-whitelists/blob/master/onboard/onboard_android.md