Apple and akamaitechnologies.com Traffic

onnovus wrote:

According to documentation Apple requires to have 17.0.0.0/8 subnet open in order to operate properly.

Not quite. It says if your firewall can only be configured with IP addressed, then you can use that block. But that is strictly a fallback and might not work. You are supposed to use DNS.

In our firewall the mentioned subnet is opened. However when pushing VPP applications to our devices, we can see traffic going to *.deploy.static.akamaitechnologies.com (which is not part of 17.0.0.0/8).

Referencing the following Apple documentation

Use Apple products on enterprise networks - Apple Support

Apple resolves the hostnames (updates-http.cdn-apple.com & updates.cdn-apple.com) to a 17.x.x.x IP address.

That document says nothing about those hostnames resolving to that IP address. It mentions that Apple owns that block, but it never says that Apple exclusively uses that block.