Still no solution? IT Security is bugging me because they need an IP (range) to whitelist the request from the Apple CDN. Does anyone know at what moment the CDN will request for the configuration file and at which interval will it do request to update the configuration? Will the configuration in the CDN be invalidated if a refresh fails?