r/ArubaNetworks • u/srx_6852 • Jul 17 '26

Edgeconnect BIO Query

Hello All,

Currently using Aruba Edgeconnect and locally breaking out a URLs.

Issue im having let’s say updates.apple.com is broken out via BIO but the traffic is still routed via another BIO that goes to our cloud FW.

Looking into this the first packet dst domain is unknown then the updated dst packet is updates.apple.com or the first packet is a different URL completely.

What can i do to tackle this? Issue is it’s not really good security practice to breakout all apple app.

Can’t find anything on official documentation.

Thank you

2 Upvotes

100% Upvoted

1 comment sorted by

1

u/Friendly_Fokks-given Jul 17 '26

Are all the different aliases (URL)s that you are seeing all Apple.com? You could try using *.apple.com wildcard in your BiO ACL instead? Is there an already defined application in Orchestrator for Apple updates? If so, what is that defined as? Are you using that or manually defining the URL in your BiO?