Welcome to ISAserver.org

Forums | Register | Login | My Profile | Inbox | RSS RSS icon | My Subscription | My Forums | Address Book | Member List | Search | FAQ | Ticket List | Log Out

Unable to use Windows Update Services

Users viewing this topic: none

Logged in as: Guest
  Printable Version
All Forums >> [ISA Server 2004 Firewall] >> General >> Unable to use Windows Update Services Page: [1]
Login
Message << Older Topic   Newer Topic >>
Unable to use Windows Update Services - 28.May2005 11:13:00 PM   
kiekar

 

Posts: 55
Joined: 23.May2005
From: Montreal, Canada
Status: offline
Hello,

I'm unable to use Windows Update Services on the
ISA 2004 box and the client computers in the internal LAN zone. I created a new policy per the article http://isaserver.org/articles/2004su1345.html.

When I checked the logs I'm getting denied connection for protocol HTTPS from Local Host to External and I'm not sure if protocol RCP (all interfaces) denied connection - Default Rule - External to Local Host is also causing the problem. Any help would be much appreciated.

Thanks

Karl
Post #: 1
RE: Unable to use Windows Update Services - 29.May2005 9:07:00 AM   
Sunny.C

 

Posts: 800
Joined: 5.Apr.2005
From: sydney
Status: offline
why are you publishing external to local host???It should be the other way around, meaning local host to External(Microsoft Update Site).

(in reply to kiekar)
Post #: 2
RE: Unable to use Windows Update Services - 29.May2005 10:21:00 AM   
kiekar

 

Posts: 55
Joined: 23.May2005
From: Montreal, Canada
Status: offline
Hello,

As per the article link above, I only added the three protocols: HTTP, HTTPS, and Kerberos-Sec (UDP). When I try the Windows Update Services, I do get the web page it starts the scan then I get Windows Update has encountered an error. I then check the logs, and as I said in my initial post I get the HTTPS denied connection. The RCP (all interfaces) denied connection log may be related, I don't know. I'm just reading the logs and why itĘs showing external to local host, I'm not sure.

Karl

(in reply to kiekar)
Post #: 3
RE: Unable to use Windows Update Services - 29.May2005 7:11:00 PM   
Sunny.C

 

Posts: 800
Joined: 5.Apr.2005
From: sydney
Status: offline
Are you using proxy on the isa server??? If not try using proxy with it.

(in reply to kiekar)
Post #: 4
RE: Unable to use Windows Update Services - 29.May2005 9:44:00 PM   
kiekar

 

Posts: 55
Joined: 23.May2005
From: Montreal, Canada
Status: offline
Hello,

I'm not sure if I'm using proxy on the server.
Since I'm new to ISA server, how can I find out?
I installed ISA server using the quick installation guide from the Configuring ISA 2004
book. If I don't have the proxy on the ISA server, how can I use the proxy? Any guidance would be much appreciated.

Thanks

(in reply to kiekar)
Post #: 5
RE: Unable to use Windows Update Services - 29.May2005 10:03:00 PM   
LLigetfa

 

Posts: 2184
Joined: 10.Aug.2004
From: fort frances.on.ca
Status: offline
Not sure why you would need to use proxy at the server. Is this W2K or W2K3 Server?

IIRC, ISA server has a system policy that governs WU and WU uses WinHTTP which has its own proxy settings independent of IE. Just spark up a DOS box and type PROXYCFG.

You don't say what OS the clients are that are unable to run WU. XP/SP2 also uses WinHTTP and needs to be configured with PROXYCFG.

(in reply to kiekar)
Post #: 6
RE: Unable to use Windows Update Services - 30.May2005 2:41:00 AM   
Sunny.C

 

Posts: 800
Joined: 5.Apr.2005
From: sydney
Status: offline
this should help you out
http://telecom.njit.edu/docs/IEproxyconfig.html

Keep in mind your proxy server's name should be your isa server name, this applies only if your left it as default.The port should be 8080.

(in reply to kiekar)
Post #: 7
RE: Unable to use Windows Update Services - 30.May2005 6:50:00 PM   
kiekar

 

Posts: 55
Joined: 23.May2005
From: Montreal, Canada
Status: offline
Hello,

Thanks for all the replies. I was able to get the
W2k3/ISA 2004 box to work by using the proxycfg -P proxyservername:8080 command. I initially tried setting Tools-Internet Options-Connections-LAN settings and by selecting the proxy server checkbox in IE with the address of my firewall name and port 8080 which Unfortunately did not solve the problem.

My problem now is I can't get my WinXp sp2 to use
the Windows Update Services to work which is located in my LAN zone. I tried to use the same configuration as above. Do I need to create a new access rule?

Regards

Karl

(in reply to kiekar)
Post #: 8
RE: Unable to use Windows Update Services - 30.May2005 6:56:00 PM   
Sunny.C

 

Posts: 800
Joined: 5.Apr.2005
From: sydney
Status: offline
You should have a rule from internal to external, protocols http,https. That's all you need for the clients.

(in reply to kiekar)
Post #: 9
RE: Unable to use Windows Update Services - 30.May2005 6:56:00 PM   
kiekar

 

Posts: 55
Joined: 23.May2005
From: Montreal, Canada
Status: offline
Hello,

Disregard my last posting, I found the problem.
I had a firewall on the client PC that caused
the problem.

Once agian thanks for help.

Karl

(in reply to kiekar)
Post #: 10

Page:   [1] << Older Topic    Newer Topic >>
All Forums >> [ISA Server 2004 Firewall] >> General >> Unable to use Windows Update Services Page: [1]
Jump to:

New Messages No New Messages
Hot Topic w/ New Messages Hot Topic w/o New Messages
Locked w/ New Messages Locked w/o New Messages
 Post New Thread
 Reply to Message
 Post New Poll
 Submit Vote
 Delete My Own Post
 Delete My Own Thread
 Rate Posts