Frequent Contributor II

Amazon Appstore PEF Rules

I'm trying to provide access to our Kindle devices to the Amazon Appstore before authenticating on our captive portal network. I've found very little and I've attached an android device and tried to check the datapath session table but the kindle was trying to reach a lot of destinations.


Here are networks I was allowing:


I was allowing ports 80 and 443 and not seeing any denies to these address when checking.


Thanks in advance,



Guru Elite

Re: Amazon Appstore PEF Rules

You should sniff to see what dns names are being looked up and allow the domains instead of IP blocks.

| Tim Cappalli | Aruba Security | @timcappalli | |

NOTE: Answers and views expressed by me on this forum are my own and not necessarily the position of Aruba or Hewlett Packard Enterprise.
Frequent Contributor II

Re: Amazon Appstore PEF Rules

I did a pcap and used ClearSight Analyzer to read it and produce host names where applicable and was able to get the amazon appstore to load and browse apps but not download apps. The NAT addresses looked like they were going to an akamai server and several other IPs that changed each time I tried to redownload an app or download a different app.


Any other thoughts? I am so close!


Re: Amazon Appstore PEF Rules

Ive seen multiple devices go to different destinations and its also different by reagion. Here is the complete list of the ones that I have seen.


Kindle Fire CNA


Google Play (aka Android Market) - google play access - download app from google play store

Additional (these resolved IPs may not match your local environment): -,, 137, 142 -, - - -,14 - -, 46 -


Amazon Market

Thank You,

--Give Kudos: found something helpful, important, or cool? Click Kudos Star in a post.

--Problem Solved? Click "Accepted Solution" in a post.
Frequent Contributor II

Re: Amazon Appstore PEF Rules

For amazon I've added:


But ultimately I'm just putting a local copy of the APK that they'll need to download becuase what a pain!

Search Airheads
Showing results for 
Search instead for 
Did you mean: