Apple TV and iTunes

[techuser]

I have an Apple TV that is running on my network, I am seeing a great deal of traffic for the following two sites:

phobos.apple.com
ax.init.itunes.apple.com

The user is using the Apple TV to product content onto a projector, and using it to access his computer.

I'd like to ensure that iOS devices such as phones and tablets can access normal regulated internet content and receive product updates, but I want to ensure that users cannot stream video and audio content without a request.

Questions:
(1) Are these sites safe? As mentioned, I'm seeing a great deal of traffic for these sites with just one Apple TV device.

(2) Using the Paid Web Filter what is the best way to regulate this content. Right now it is blocking ax.init.itunes.apple.com as it is detecting that it's category=MUSIC, and I have blocked phobos.apple.com by adding it specifically to the blocked sites.

[sky-knight]

Apple products use HTTP Resume to stream. So if you run them through an AV module that disables HTTP resume, no more streaming.

All you need is the policy manager, and directory connector, and some creative use of the captive portal. Make a rake that kills HTTP resume everyone goes through by default, make another that doesn't and make policies that move things as needed.

Just beware that http resume breaks a few other things too.