Controlling iTunes streaming radio

[#1]

Article

Description	Controlling iTunes streaming radio
Components	FortiGate 2.8 - all units iTunes
Steps or Commands	Apple iTunes includes an Internet radio tuner which streams live Internet radio streams. These streams may slow network speeds and Internet access. You can control the access to these streams by blocking the ports the streams use. The radio tuner streams use in the 8000 range and in the 42000 range. For details on the ports iTunes uses, see the Apple Support article iTunes: Using the Radio Tuner Behind a Firewall. To control iTunes radio stream access, add a new Service entry to the FortiGate unit and add a firewall policy to deny the service. To create iTunes services Go to Firewall>Service>Custom. Select Create New. Enter the name of the service. Select the protocol of TCP. Specify the Source Port number range by entering the low and high port numbers. For a single port number, enter this number in both the low and high fields. Specify the Destination Port number range by entering the low and high port numbers. For a single port number, enter this number in both the low and high fields. Select OK Because iTunes uses two port ranges, create a Service Group, and include all iTunes services for the various ports. To create a service group Go to Firewall>Service>Group. Select Create New. Enter the group name Add the iTunes services from the Available Services and move them to the Members column. Select OK. Add a firewall policy for the iTunes service group to control communications through this service. To add a firewall policy Go to Firewall>Policy. Select Create New. Configure the Source, Destination and Schedule. Select the iTunes service group. Select the Action as Deny. Select OK. For more information on Firewall policies, see the FortiGate Administration Guide.