- Products
- Network Security
- Threat Protection
- Secure Access Service Edge (SASE)
- Cloud Security
- Endpoint Security
- Email Security
- Secure Access
-
Wi-Fi 6 Access Points
SonicWall SonicWave 600 series access points provide always-on, always-secure connectivity for complex, multi-device environments.
Read More
- Solutions
- Industries
- Use Cases
- Solutions Widgets
- Solutions Content Widgets
Federal
Protect Federal Agencies and Networks with scalable, purpose-built cybersecurity solutions
- Solutions Image Widgets
-
- Partners
- SonicWall Partners
- Partner Resources
- Partner Widgets
- Custom HTML : Partners Content WIdgets
Partner Portal
Access to deal registration, MDF, sales and marketing tools, training and more
- Partners Image Widgets
-
- Support
- Support
- Resources
- Capture Labs
- Support Widget
- Custom HTML : Support Content WIdgets
Support Portal
Find answers to your questions by searching across our knowledge base, community, technical documentation and video tutorials
- Support Image Widgets
-
- COMPANY
- PROMOTIONS
- MANAGED SERVICES
- Contact Sales
-
- Menu
- Solutions
- Solutions Widgets
- Solutions Image Widgets
-
- Solutions Widgets
- Partners
- Partner Widgets
- Partners Image Widgets
-
- Partner Widgets
- Support
- Support Widget
- Support Image Widgets
-
- Support Widget
- Solutions
- Solutions Widgets
- Solutions Image Widgets
-
- Solutions Widgets
- Partners
- Partner Widgets
- Partners Image Widgets
-
- Partner Widgets
- Support
- Support Widget
- Support Image Widgets
-
- Support Widget
Apple iTunes and App Store does not load when Client DPI-SSL is enabled
10/14/2021 
18 People found this article helpful
197,975 Views
Description
After enabling Client DPI-SSL, Apple iTune and Apple App Store does not load. The SonicWall Client DPI-SSL CA certificate has been imported into the iOS device.
Resolution
Resolution for SonicOS 6.5
This release includes significant user interface changes and many new features that are different from the SonicOS 6.2 and earlier firmware. The below resolution is for customers using SonicOS 6.5 firmware.
iTunes and App Store, like many other such applications, use certificate pinning and due to this when SonicWall Client DPI-SSL is enabled, they will fail to connect.
The solution is to exclude it from DPI-SSL Client Inspection.
To do so, follow these steps:
1. Navigate to Manage | Deep Packet Inspection | SSL Client deplyment | Common Name.
On the Client DPI-SSL page, add the certificate Common Name (CN) itunes.apple.com under Common Name Exclusions.
2. Click on Accept at the bottom to save the changes.
NOTE: After excluding iTunes and App Store from DPI-SSL Client Inspection, SonicWall will not be able inspect the contents of the traffic between the client and the server.
Resolution for SonicOS 6.2 and Below
The below resolution is for customers using SonicOS 6.2 and earlier firmware. For firewalls that are generation 6 and newer we suggest to upgrade to the latest general release of SonicOS 6.5 firmware.
iTunes and App Store, like many other such applications, use certificate pinning and due to this when SonicWall Client DPI-SSL is enabled, they will fail to connect.
The solution is to exclude it from DPI-SSL Client Inspection.
To do so, follow these steps:
1. On the Client DPI-SSL page, add the certificate Common Name (CN) itunes.apple.com under Common Name Exclusions.
2. Click on Accept at the top to save the changes.
NOTE: After excluding iTunes and App Store from DPI-SSL Client Inspection, SonicWall will not be able inspect the contents of the traffic between the client and the server.
Related Articles
- How to Setup the SonicWave 600 series
- Identical Access Rules for different users/user groups
- Advanced Network Security eLearning Training Course
Categories
- Firewalls > TZ Series
- Firewalls > SonicWall NSA Series
- Firewalls > SonicWall SuperMassive 9000 Series
- Firewalls > SonicWall SuperMassive E10000 Series
YES
NO