Forefront Threat Management Gateway

All the latest news and tips on Microsoft Forefront Threat Management Gateway


ITunes and ISA Server 2004 Service Pack 2

  • Comments 15
  • Likes

Prior to SP2, if a requested destination name was in the list, it was accessed directly. With SP2 - a requested name in the list is accessed directly, unless IP addresses are included in the list. In that case, an attempt is made to resolve the site name to an IP address. Access is direct only if the resolved IP address is found in the list.

There have been lots of questions from customers on how to make ITunes work after applying ISA Server Service Pack 2.

First of all, some background on what’s happening. A server might return a compressed response (with an "Content-Encoding: gzip "HTTP header) even though ISA Server did not specifically request compressed data. For security reasons, if the ISA Server compression settings are not enabled to Request compressed HTTP content from servers, then ISA Server will deny the response.

This is what’s happening with ITunes.

The good news: the music can go on…You can configure ISA Server so that ITunes will work. Here’s how:

  1. On the General node, click Define HTTP Compression Preferences.
  2. On the Settings tab, add a computer set that includes the IP address of the site to the list.
  3. Select the site and click Set Compression.
  4. Enable Request compressed HTTP content from servers.

Let the music play!

Adina Hagege

ISA Server Product Team

  • While I appreciate the help, I don’t under stand step 2 ‘add the site to the list’.  Can you be more specific?  Thanks Russell

  • Step 2 doesn't make sense - when you click Add, you get the dialog to add a new  Network or Computer Set.  How do I add a site?

  • Apologies for being unclear--I'll update the entry, which should read "add a computer set that includes the IP address of the site to the list."

  • If you start logging then access iTunes you get several IP addresses. Do you know what IP ranges are necessary?  Since you are bloging on setting up iTunes in ISA SP2 can you expand on step 2. Thanks

  • Exactly, is there a list of iTunes iP addresses. Surely everyone has to enter the same addresses and could list them here?

    Thank you

  • Use the logging tab to find out. However these are the ones i use:,,,

  • Best of the text i read about a problem.

  • We are wellocme to it's configuration.

  • Wellcome to the real world.

  • More IP addresses: and

  • I have added all the IP addresses as instructed.  I still can't get iTunes store to work.  What am I missing?

  • Hello everyone, wanna be part of some kind of community, possible here? anyone here?

  • What about ISA 2006? We cant get itunes store to work with Macs if I have NTLM and basic authentication enabled. Is this the same problem? When I disable NTLM the music store works fine. Can I create a rule that allows anonymous to the music store regardless of the authentication settings on the listener?

  • PingBack from


    Guide to financial freedom by buying real estate for Pennies On The Dollar

Your comment has been posted.   Close
Thank you, your comment requires moderation so it may take a while to appear.   Close
Leave a Comment