Welcome to ISAserver.org

"How to block windows update traffic by using ISA Server"

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA Server 2004 Firewall] >> Access Policies >> "How to block windows update traffic by using ISA Server"

Page: [1]

Message

<< Older Topic Newer Topic >>

"How to block windows update traffic by using ISA ... - 12.Mar.2007 1:25:20 AM

shab550

Posts: 2
Joined: 12.Mar.2007
Status: offline

i'm gonna to block windows update trrafic by isa server 2004.
i define an access rule that apply to ALL OUTBOUND TRAFFIC from my lan to destination of these URLs(i set some URLs for example:http://www.download.windowsupdate.com/* and http://download.windowsupdate.com/* and.....)
order of this access rul is 1
but access rule does't work.
how do i this block?

Post #: 1

Featured Links*

RE: "How to block windows update traffic by using ... - 12.Mar.2007 4:11:29 AM

elmajdal

Posts: 5099
Joined: 16.Sep.2004
From: Lebanese in Kuwait
Status: offline

Hi,

Under Network Objects > Domain Name Sets , you will find Microsoft Update Domain Name Set

create a rule to block accessing these sites.

HTH,
Tarek

_____________________________

Tarek Majdalani

MS Forefront Edge Security MVP
Website : http://www.elmajdal.net/ISAServer
New Section : http://www.elmajdal.net/Win2k8

(in reply to shab550)

Post #: 2

RE: "How to block windows update traffic by using ... - 16.Apr.2007 3:23:04 AM

shab550

Posts: 2
Joined: 12.Mar.2007
Status: offline

hi
and thnx for your reply
i found DOMAIN NAME SET and "System Policy Allowed Sites" but it filters MICROSOFT.COM too
so i created a new domain name set that just filter windowsupdate.com and i created a rule for that
but clients can update yet
what do i do?
my client join to isa(2004) with securenat or proxy

(in reply to elmajdal)

Post #: 3

RE: "How to block windows update traffic by using ... - 16.Apr.2007 2:24:04 PM

elmajdal

Posts: 5099
Joined: 16.Sep.2004
From: Lebanese in Kuwait
Status: offline

Check the Logs using the Live Monitor Tab in ISA and see their the sites that are accessed when running the windows update.

HTH,
Tarek

_____________________________

Tarek Majdalani

MS Forefront Edge Security MVP
Website : http://www.elmajdal.net/ISAServer
New Section : http://www.elmajdal.net/Win2k8

(in reply to shab550)

Post #: 4