In my atmosphere, I’ve just a few units that’s linked by way of Cisco AnyConnect VPN the place I seen that just a few of those mac units often ship a number of ICMP request packets (as much as 100+, every packet is approx. 1386 bytes and 4158 bytes) in direction of totally different Apple owned IP addresses (e.g: 17.253.83.201 – 17.253.83.206).

The one commonality I’ve is that at any time when these units that despatched ICMP request packet over to Apple IPs typically have prior HTTP denied visitors in direction of apple domains.

Is that this behaviour anticipated? Can’t appears to seek out any indicator from apple documentation or discussion board that will clarify this behaviour.

The logical clarification I can consider is Icmp is simply one other different means for mac gadget to “double test” if they’ll set up connection to the apple server for any potential updates or process however no precise affirmation from apple dev crew on my guess.

Many thanks upfront!