---
title: "configuration.apple.com: what it is and what breaks if you block it · Kilobat"
url: "https://kilobat.app/hosts/configuration-apple-com"
description: "configuration.apple.com is the Apple host for Rosetta 2 updates on a Mac. What it serves, and what breaks if you block it."
---

Updates and downloads

# configuration.apple.com

`configuration.apple.com` is the Apple host for Rosetta 2 updates. Apple lists it for macOS only, on port 443.

Run by Apple · Ports: 443 TCP · Checked: 1 November 2026

## Short answer

The Apple host that Apple lists for Rosetta 2 updates on macOS.

Block with care

Blocking it can stop Rosetta 2 from installing or updating, so Intel-only apps may not run on a Mac with Apple silicon.

Matches

`configuration.apple.com`

A name with `*.` covers every name under it: `*.push.apple.com` matches `1-courier.push.apple.com`.

## What it serves

Apple's enterprise host list names `configuration.apple.com` in its Software updates section, for “Rosetta 2 updates”.

Rosetta 2 lets a Mac with Apple silicon run apps built for Intel processors. Apple Platform Security describes it.

Apple doesn't say which process contacts this host.

## What breaks if you block it

Block with care

Blocking it can stop Rosetta 2 from installing or updating, so Intel-only apps may not run on a Mac with Apple silicon.

What breaks if you block it

- Rosetta 2 updates can't download.
- Intel-only apps may fail to open if Rosetta 2 isn't installed yet.

With Kilobat Pro and the network filter, you can block a host for every app or for one app: in Connections, select a connection and choose Block. Apple’s own services are never blocked by Kilobat’s [Protection](https://kilobat.app/docs/blocking#protection) lists.

## Apple’s rules for its hosts

Apple’s list, [Use Apple products on enterprise networks](https://support.apple.com/en-us/101555), says that devices open these connections, not Apple’s servers. Apple services fail any connection that uses HTTPS interception, so a proxy that inspects TLS should leave Apple’s hosts alone.

If a firewall allows hosts by name, allowing `*.apple.com` covers most Apple services, Apple says. A firewall that works only with addresses can allow `17.0.0.0/8` for IPv4, and `2403:300::/32`, `2620:149::/32` and `2a01:b740::/32` for IPv6.

To see which app on your Mac opened a connection to this host, use Kilobat’s Connections tab, or the [agent network log](https://kilobat.app/docs/agents#agent-network-log) for AI agents.

## Sources

- [Apple Support: Use Apple products on enterprise networks](https://support.apple.com/en-us/101555)
- [Apple Platform Security: Rosetta 2 on a Mac with Apple silicon](https://support.apple.com/guide/security/rosetta-2-on-a-mac-with-apple-silicon-secebb113be1/web)

Checked on 1 November 2026.

## Related

- [swcdn.apple.com](https://kilobat.app/hosts/swcdn-apple-com): Apple's host for macOS update downloads. Big transfers from it are macOS updates.