Adding Steering Exceptions for macOS Upgrade
If you're Netskope account isn't updated to the most recent steering configuration, the macOS upgrade process might be interrupted. Apple uses a set of URLs for OS upgrades, and if these URLs are not bypassed by the Netskope Client, the OS upgrade process fails. If you add Apple URLs as domain exceptions in your steering configuration, the Netskope Client bypasses the URLs. These exceptions are only applicable for Apple Devices (from M1 Big Sur version 11.3.1 to latest). Any new and updated steering configurations contain these exceptions so you don't have to add the macOS exceptions.
To add Apple URLs as domain exceptions in your steering configuration:
Go to Settings > Security Cloud Platform > Steering Configuration.
Click
for Default tenant config.Click View Exceptions.
Click New Exception and then Domains.
In the New Exception window, under Exception Type, enter the following URLs:
ws-ee-maidsvc.icloud.com
*.cdn-apple.com
cdn-apple.com
mzstatic.com
p37-caldav.icloud.com
gateway.icloud.com
metrics.icloud.com
setup.icloud.com
*.apple.com
apple.com
Click Add.
The Netskope Client syncs steering configuration updates every 60 minutes. After the Netskope Client syncs the updates, Netskope bypasses the Apple URLs and allows the device OS upgrades.