I am trying to stop users on IOS devices from getting the update message on their devices. I have seen posts in the past that show if you setup a destination file with names mesu.apple.com and appldnld.apple.com, add it to an acl and apply it to a user role it would stop it from happening. We are running 6.3.1.14. So far that scenario doesn't work. I know in 6.4 you can use DPI but we are not ready to upgrade to 6.4 yet. Has anybody gotten this scenario to work?