Updates and downloads
swdownload.apple.com
swdownload.apple.com is an Apple host for macOS updates. Apple lists it for macOS only, on ports 443 and 80, and says that it supports proxies.
Short answer
An Apple host for macOS update downloads. Apple says that it works through proxies.
Block with care
Blocking it can stop macOS updates downloading. Turn off automatic downloads instead, then update on your usual network.
- Matches
swdownload.apple.com
A name with *. covers every name under it: *.push.apple.com matches 1-courier.push.apple.com.
What it serves
Apple's enterprise host list names swdownload.apple.com in its Software updates section, for “macOS updates”, and marks it as supporting proxies.
Its name points to downloads. Large transfers from it are most likely macOS update content.
On a Mac, softwareupdated handles macOS updates, so its connections here belong to Software Update.
Processes that use it
What breaks if you block it
Block with care
Blocking it can stop macOS updates downloading. Turn off automatic downloads instead, then update on your usual network.
What breaks if you block it
- macOS update downloads may fail, so security fixes wait.
With Kilobat Pro and the network filter, you can block a host for every app or for one app: in Connections, select a connection and choose Block. Apple’s own services are never blocked by Kilobat’s Protection lists.
Notes
Apple says that its services fail connections that use HTTPS interception. Exclude its hosts from TLS inspection.
On a metered network, Kilobat Pro with the network filter pauses macOS Software Update downloads.
Apple’s rules for its hosts
Apple’s list, Use Apple products on enterprise networks, says that devices open these connections, not Apple’s servers. Apple services fail any connection that uses HTTPS interception, so a proxy that inspects TLS should leave Apple’s hosts alone.
If a firewall allows hosts by name, allowing *.apple.com covers most Apple services, Apple says. A firewall that works only with addresses can allow 17.0.0.0/8 for IPv4, and 2403:300::/32, 2620:149::/32 and 2a01:b740::/32 for IPv6.
To see which app on your Mac opened a connection to this host, use Kilobat’s Connections tab, or the agent network log for AI agents.
Sources
- Apple Support: Use Apple products on enterprise networks
- Kilobat docs: Pausing updaters on metered networks
Checked on 1 November 2026.