Security

Reply
Frequent Contributor I

2017 Google Play Store URL whitelist

Has anyone got an up to date URL whitelist for Google Play store?

Trying to setup a captive portal whitelist to allow download of Quickconnect for Android Onboarding :)

Guru Elite

Re: 2017 Google Play Store URL whitelist

It hasn't changed in a while:

netdestination GOOGLE-PLAY
name *.ggpht.com
name *.play.googleapis.com
name android.clients.google.com
name www.googleapis.com
name *.gvt1.com
!

| Tim Cappalli | Aruba Security | @timcappalli | timcappalli.me |

NOTE: Answers and views expressed by me on this forum are my own and not necessarily the position of Aruba or Hewlett Packard Enterprise.
Guru Elite

Re: 2017 Google Play Store URL whitelist

It hasn't changed in a while:

netdestination GOOGLE-PLAY
name *.ggpht.com
name *.play.googleapis.com
name android.clients.google.com
name www.googleapis.com
name *.gvt1.com
!

| Tim Cappalli | Aruba Security | @timcappalli | timcappalli.me |

NOTE: Answers and views expressed by me on this forum are my own and not necessarily the position of Aruba or Hewlett Packard Enterprise.
Frequent Contributor I

Re: 2017 Google Play Store URL whitelist

Thanks Tim!

 

Is there anything else required for the pre-auth role in Instant that the below for this to work?

 

wlan walled-garden
white-list "*.ggpht.com"
white-list "android.clients.google.com "
white-list "*.gvt1.com"
white-list "*.play.googleapis.com"
white-list "www.googleapis.com"

 

wlan access-rule pre-auth
captive-portal external profile clearpass
rule any any match any any any deny

 

New Contributor

Re: 2017 Google Play Store URL whitelist

Hi,

 

Did this whitelist work?

 

I ended up using this....

from Cisco's trustsec guide, you can do it per IP block:

74.125.00/16 173.194.0.0/16 TCP/UDP:5228 TCP/UDP:8889

source: http://www.cisco.com/c/dam/en/us/solutions/collateral/enterprise/design-zone-security/howto_61_byod_provisioning.pdf

Frequent Contributor I

Re: 2017 Google Play Store URL whitelist

I wasn't able to get it working with my test phone, but it was running Gingerbread so it could need additional URLs...

New Contributor

Re: 2017 Google Play Store URL whitelist

I'm trying to figure out if there's a way to block downloading of apps from Google/Apple store - except a few whitelisted apps. This is for guest users connecting to the guest wi-fi via an Andoid/iOS phone.

Guru Elite

Re: 2017 Google Play Store URL whitelist

No. That's not possible

| Tim Cappalli | Aruba Security | @timcappalli | timcappalli.me |

NOTE: Answers and views expressed by me on this forum are my own and not necessarily the position of Aruba or Hewlett Packard Enterprise.
New Contributor

Re: 2017 Google Play Store URL whitelist

Thanks Tim for the prompt response - much appreciated. I wonder if the ClearPass product is the best fit for an app control scenario like this... 

Guru Elite

Re: 2017 Google Play Store URL whitelist

ClearPass is not an enforcement point. It's a policy engine.

| Tim Cappalli | Aruba Security | @timcappalli | timcappalli.me |

NOTE: Answers and views expressed by me on this forum are my own and not necessarily the position of Aruba or Hewlett Packard Enterprise.
Search Airheads
cancel
Showing results for 
Search instead for 
Did you mean: