• RSS
  • Twitter
  • FaceBook

Welcome to ISAserver.org

Forums | Register | Login | My Profile | Inbox | RSS RSS icon | My Subscription | My Forums | Address Book | Member List | Search | FAQ | Ticket List | Log Out

ISAServer 2006 with WSUS Server

Users viewing this topic: none

Logged in as: Guest
  Printable Version
All Forums >> [ISA 2006 General] >> General >> ISAServer 2006 with WSUS Server Page: [1] 2   next >   >>
Login
Message << Older Topic   Newer Topic >>
ISAServer 2006 with WSUS Server - 2.May2008 6:42:58 AM   
vimal

 

Posts: 85
Joined: 31.Oct.2007
From: INDIA
Status: offline
I have instllled ISAServer 2006 with WSUS Server. ISA Server working fine and when i try to check update form isa cliant by these command
wuauclt.exe /detectnow
http://gateway/selfupdate/wuident.cab
http://localhost/selfupdate/iuident.cab
it show now respond it unable to update cliant .....to check ISA Server log it block traffic on isa server port 80 how i can update my cliant from WSUS Server and i am able to update syncronize by WSUS Server.....what should i do now..?

_____________________________

Regards,
Vimal Dhiman (MCSA ,ISA Firewall)
http://computerworldhelpline.blogspot.com
Post #: 1
RE: ISAServer 2006 with WSUS Server - 2.May2008 2:20:39 PM   
pwindell

 

Posts: 2244
Joined: 12.Apr.2004
From: Taylorville, IL
Status: offline
You have to allow the WSUS Server to connect outbound with HTTP anonymously.

_____________________________

Phillip Windell

(in reply to vimal)
Post #: 2
RE: ISAServer 2006 with WSUS Server - 6.May2008 11:27:19 AM   
tshinder

 

Posts: 50013
Joined: 10.Jan.2001
From: Texas
Status: offline
There is a System Policy Rule that allows for CRL checking that will enable such a rule.

HTH,
Tom

_____________________________

Thomas W Shinder, M.D.

(in reply to pwindell)
Post #: 3
RE: ISAServer 2006 with WSUS Server - 7.May2008 4:16:33 AM   
vimal

 

Posts: 85
Joined: 31.Oct.2007
From: INDIA
Status: offline
wsus server is connected .its working fine and can syncronize updates form internet on isa server but when i try to connect cliant and update it cannot update form wsus server. which rule should i make for wsus cliant.as i tell you about my server wsus server and isa server on same pc.

_____________________________

Regards,
Vimal Dhiman (MCSA ,ISA Firewall)
http://computerworldhelpline.blogspot.com

(in reply to tshinder)
Post #: 4
RE: ISAServer 2006 with WSUS Server - 8.May2008 8:59:53 PM   
pwindell

 

Posts: 2244
Joined: 12.Apr.2004
From: Taylorville, IL
Status: offline
You don't.

You are confusing Windows Update & Microsoft Update with Automatic Updates.  They are not the same thing.  It will not go to WSUS when you run Windows Update or Microsoft Update.

Automatic Updates works with WSUS and there is no "manual" way to run it with the normal GUI.  It works on a timer.


_____________________________

Phillip Windell

(in reply to vimal)
Post #: 5
RE: ISAServer 2006 with WSUS Server - 12.May2008 11:22:15 AM   
tshinder

 

Posts: 50013
Joined: 10.Jan.2001
From: Texas
Status: offline
If the client is behind the ISA Firewall, then you need to make sure that the client is using Direct Access to connect to the WSUS server, and not "bounce back" through the ISA Firewall.

HTH,
Tom

_____________________________

Thomas W Shinder, M.D.

(in reply to pwindell)
Post #: 6
RE: ISAServer 2006 with WSUS Server - 31.May2008 6:47:08 AM   
vimal

 

Posts: 85
Joined: 31.Oct.2007
From: INDIA
Status: offline
sir can you tell me how i can access cliant direct wsus...?

_____________________________

Regards,
Vimal Dhiman (MCSA ,ISA Firewall)
http://computerworldhelpline.blogspot.com

(in reply to tshinder)
Post #: 7
RE: ISAServer 2006 with WSUS Server - 1.Jun.2008 9:28:09 AM   
tshinder

 

Posts: 50013
Joined: 10.Jan.2001
From: Texas
Status: offline
Direct Access is the process where the Web Proxy and Firewall clients are bypassed when connecting to a host. You configure the Direct Access domains and URLs in the Properties of the ISA Firewall Network from which the clients connect.

Thanks!
Tom

_____________________________

Thomas W Shinder, M.D.

(in reply to vimal)
Post #: 8
RE: ISAServer 2006 with WSUS Server - 5.Jun.2008 12:32:44 PM   
gbarnas

 

Posts: 155
Joined: 27.Apr.2005
From: New Jersey
Status: offline
You need to explicitly permit HTTP from Localhost to your WSUS server. Once I did this I had no issue accessing WSUS from my ISA server.

As far as manual updates, you can download some scripts from my web site tht will permit you to download/install WSUS updates under precise command-line control. My entire server infrastructure performs updates at exact days/times - down to QA on week 2 and production on week 3 of every month. These scripts utilize the WSUS API, and rely on the Kixtart scripting language. You can find some VB scripts on the web, but they are presented as examples and not as robust in how they function.

The wuauclt.exe /detectnow command will check, download, and apply updates (if so configured) but can take several minutes to "get around to it". The scripts that use the API perform the download/install immediately.

http://www.innotechcg.com - under Products / Admin Tools / WSUS Library.

Glenn

(in reply to vimal)
Post #: 9
RE: ISAServer 2006 with WSUS Server - 5.Jun.2008 12:47:12 PM   
Jason Jones

 

Posts: 4663
Joined: 30.Jul.2002
From: United Kingdom
Status: offline
From memory you need HTTP, HTTPS and Kerberos-Sec (UDP) from Localhost to the WSUS server.

http://www.isaserver.org/articles/2004su1345.html

Cheers

JJ

_____________________________

Jason Jones | Forefront MVP | Silversands Ltd
My Blogs: http://blog.msedge.org.uk/ and http://blog.msfirewall.org.uk/

(in reply to gbarnas)
Post #: 10
RE: ISAServer 2006 with WSUS Server - 5.Jun.2008 1:41:39 PM   
elmajdal

 

Posts: 6022
Joined: 16.Sep.2004
From: Lebanese in Kuwait
Status: offline
quote:

ORIGINAL: vimal

I have instllled ISAServer 2006 with WSUS Server. ISA Server working fine and when i try to check update form isa cliant by these command
wuauclt.exe /detectnow
http://gateway/selfupdate/wuident.cab
http://localhost/selfupdate/iuident.cab
it show now respond it unable to update cliant .....to check ISA Server log it block traffic on isa server port 80 how i can update my cliant from WSUS Server and i am able to update syncronize by WSUS Server.....what should i do now..?


Hi,

Lets clear this .


You Install WSUS Server ON the ISA server machine ?

_____________________________

Tarek Majdalani

Windows Expert - IT Pro MVP
Facebook : https://www.facebook.com/ElMajdal.Net

(in reply to vimal)
Post #: 11
RE: ISAServer 2006 with WSUS Server - 6.Jun.2008 9:15:56 AM   
fixitchris

 

Posts: 148
Joined: 23.May2007
Status: offline
vimal, did you populate the WSUS proxy credentials?

(in reply to elmajdal)
Post #: 12
RE: ISAServer 2006 with WSUS Server - 12.Jun.2008 10:39:42 AM   
winstroll

 

Posts: 37
Joined: 12.Jan.2007
Status: offline
hi

Sorry by intervain, but i have the same problem :(
I have two servers: one  is the domain  server (lets call it  hm-server)  and i have the isa server ( lets call it isa server :) )
at firts we use sus and every thing works fine....but we update to wsus, and it stops!!
no machine in the internal network can comunicate whith wsus, that is in the hm-server!!
wsus updates from the internet, and stores the update packs, but in the wsus console no computer appers!! can anyone tell me why is that?
is my isa-server blocking comunication??

saludos

(in reply to fixitchris)
Post #: 13
RE: ISAServer 2006 with WSUS Server - 12.Jun.2008 11:22:56 AM   
winstroll

 

Posts: 37
Joined: 12.Jan.2007
Status: offline
hi
this is theoutput obtain by the tool provided by  gbarnas  (Tanks by the way)

http://img88.imageshack.us/img88/8/wsusdu2.th.jpg


< Message edited by winstroll -- 12.Jun.2008 11:25:28 AM >

(in reply to winstroll)
Post #: 14
RE: ISAServer 2006 with WSUS Server - 12.Jun.2008 1:01:55 PM   
fixitchris

 

Posts: 148
Joined: 23.May2007
Status: offline
picture too small...

(in reply to winstroll)
Post #: 15
RE: ISAServer 2006 with WSUS Server - 12.Jun.2008 4:23:41 PM   
gbarnas

 

Posts: 155
Joined: 27.Apr.2005
From: New Jersey
Status: offline
Your WSUS server is behind your ISA, same network subnet as the clients, right?

The WSUS server can connect to the internet and download patches, right? Your clients can also connect to the internet, but are blocked from WSUS.

I'm guessing that your clients are Proxy Clients, which connect to ISA for HTTP access. ISA can't effectively route the packets back to the internal network, thus WSUS access is failing. Your clients should access the WSUS server directly. You need to edit the Network properties and enable "Bypass Proxy for Web Servers in this Network" - this will tell the client to connect to the WSUS server directly, without involving ISA. Then both the automatic and scripted updates should work.

Glenn

(in reply to winstroll)
Post #: 16
RE: ISAServer 2006 with WSUS Server - 12.Jun.2008 7:12:57 PM   
winstroll

 

Posts: 37
Joined: 12.Jan.2007
Status: offline
hi

WSUS is downloading updates, the connection between WSUS and internet is working fine!
connection between clients and WSUS = NOT working :(
i gona try the option of no passing the Isa Server.

thanks

saludos

(in reply to gbarnas)
Post #: 17
RE: ISAServer 2006 with WSUS Server - 12.Jun.2008 7:47:49 PM   
pwindell

 

Posts: 2244
Joined: 12.Apr.2004
From: Taylorville, IL
Status: offline
The problem is the "path" that you are using to access WSUS. 

*Maybe* you might have to set it to bypass the ISA,...but most likely you are doing something else wrong in the first place.   The "path" to WSUS should *already* be interpreted as local *without* having to do anything special.

So my feeling on this is that you have more issues than has come to light at this point.

Unless you give us very specific details,...this is just a big guessing game.


_____________________________

Phillip Windell

(in reply to winstroll)
Post #: 18
RE: ISAServer 2006 with WSUS Server - 12.Jun.2008 7:56:09 PM   
winstroll

 

Posts: 37
Joined: 12.Jan.2007
Status: offline
hi

what can i tell you that is helpfull??

thanks for the time

saludos

(in reply to pwindell)
Post #: 19
RE: ISAServer 2006 with WSUS Server - 12.Jun.2008 8:46:06 PM   
tshinder

 

Posts: 50013
Joined: 10.Jan.2001
From: Texas
Status: offline
Hey guys,

The answer to this problem is to configure the internal clients to use Direct Access. It's that simple.

HTH,
Tom

_____________________________

Thomas W Shinder, M.D.

(in reply to winstroll)
Post #: 20

Page:   [1] 2   next >   >> << Older Topic    Newer Topic >>
All Forums >> [ISA 2006 General] >> General >> ISAServer 2006 with WSUS Server Page: [1] 2   next >   >>
Jump to:

New Messages No New Messages
Hot Topic w/ New Messages Hot Topic w/o New Messages
Locked w/ New Messages Locked w/o New Messages
 Post New Thread
 Reply to Message
 Post New Poll
 Submit Vote
 Delete My Own Post
 Delete My Own Thread
 Rate Posts