Welcome to ISAserver.org

Forums | Register | Login | My Profile | Inbox | RSS RSS icon | My Subscription | My Forums | Address Book | Member List | Search | FAQ | Ticket List | Log Out

WSUS 3.0 SP1 behind ISA 2006

Users viewing this topic: none

Logged in as: Guest
  Printable Version
All Forums >> [ISA 2006 General] >> General >> WSUS 3.0 SP1 behind ISA 2006 Page: [1]
Login
Message << Older Topic   Newer Topic >>
WSUS 3.0 SP1 behind ISA 2006 - 26.Aug.2008 8:27:28 PM   
bati

 

Posts: 17
Joined: 13.Feb.2008
Status: offline
hi guys can someone please help me, my wsus can only download update with direct internet access. once I set it up to use proxy it always fails to get updates, error 500 internal server error. all clients can talk to the wsus server.

Do I need to open up any special protocol besides ftp, http and https on ISA to allow my WSUS to get updates?
Post #: 1
RE: WSUS 3.0 SP1 behind ISA 2006 - 26.Aug.2008 9:08:15 PM   
bati

 

Posts: 17
Joined: 13.Feb.2008
Status: offline
Don't worry guys I've fixed it, in case someone else happens to be in the same situation, this is how I did it:

I created a new access rule from my WSUS server to External, HTTP and HTTPS protocols and all users. very simple.

(in reply to bati)
Post #: 2
RE: WSUS 3.0 SP1 behind ISA 2006 - 28.Aug.2008 8:33:09 AM   
tshinder

 

Posts: 47420
Joined: 10.Jan.2001
From: Texas
Status: offline
Good to hear you got it working and thanks for the follow up!

Tom

_____________________________

Thomas W Shinder, M.D.
Sr. Consultant/Technical Writer
Prowess Consulting http://www.prowessconsulting.com/
Blog: http://blogs.isaserver.org/shinder/

GET THE NEW ISA 2006 Book!: http://tinyurl.com/2gpoo8

(in reply to bati)
Post #: 3
RE: WSUS 3.0 SP1 behind ISA 2006 - 28.Aug.2008 9:12:58 AM   
winstroll

 

Posts: 37
Joined: 12.Jan.2007
Status: offline
hi

my problem is not that, but is in the same category = "WSUS"

My Wsus serves updates from internet, but in my internal network local machines cannot update from Wsus Server, because IsaServer blocks the communication...

My problem is that IsaServer doesn’t “knows” witch server are on the internal network, and blocks internal communications

My question is how I put IsaServer allowing all internal communications, or just checking (and blocking) external communications.
How I say to Isa: “the computer with the Ip 10.20.*.* is on my internal network, don´t check\block communications of that server”


saludos

(in reply to tshinder)
Post #: 4
RE: WSUS 3.0 SP1 behind ISA 2006 - 2.Sep.2008 8:59:04 AM   
tshinder

 

Posts: 47420
Joined: 10.Jan.2001
From: Texas
Status: offline
Hi Winstroll,

The problem is that internal computers are bouncing off the firewall to connect to internal resources. Internal computers should be using Direct Access for internal access.

HTH,
Tom

_____________________________

Thomas W Shinder, M.D.
Sr. Consultant/Technical Writer
Prowess Consulting http://www.prowessconsulting.com/
Blog: http://blogs.isaserver.org/shinder/

GET THE NEW ISA 2006 Book!: http://tinyurl.com/2gpoo8

(in reply to winstroll)
Post #: 5
RE: WSUS 3.0 SP1 behind ISA 2006 - 2.Sep.2008 9:54:58 AM   
winstroll

 

Posts: 37
Joined: 12.Jan.2007
Status: offline
dear mr Tom

I think that already I found the problem…. the IsaServer is installed in a DC…
I'm going to change the W2003Server to a member server and install from zero the IsaServer...

(in reply to tshinder)
Post #: 6
RE: WSUS 3.0 SP1 behind ISA 2006 - 2.Sep.2008 9:57:06 AM   
winstroll

 

Posts: 37
Joined: 12.Jan.2007
Status: offline
thanks for your time!
without your aid it would not managed to get this far!

saludos

(in reply to tshinder)
Post #: 7
RE: WSUS 3.0 SP1 behind ISA 2006 - 2.Sep.2008 10:23:40 AM   
tshinder

 

Posts: 47420
Joined: 10.Jan.2001
From: Texas
Status: offline
Hi Winstroll,

Very good! Yes, get the firewall off the DC and install it on a member server.

Let us know how it works for you.

Thanks!
Tom

_____________________________

Thomas W Shinder, M.D.
Sr. Consultant/Technical Writer
Prowess Consulting http://www.prowessconsulting.com/
Blog: http://blogs.isaserver.org/shinder/

GET THE NEW ISA 2006 Book!: http://tinyurl.com/2gpoo8

(in reply to winstroll)
Post #: 8
RE: WSUS 3.0 SP1 behind ISA 2006 - 2.Sep.2008 10:51:37 AM   
winstroll

 

Posts: 37
Joined: 12.Jan.2007
Status: offline
hi mr. Tom

but can i simply remove the DC (with the dcpromo comand) and again install the IsaServer in the same W2003S without formatting….it will be that it will function without problems after???

saludos

(in reply to tshinder)
Post #: 9
RE: WSUS 3.0 SP1 behind ISA 2006 - 4.Sep.2008 7:57:53 AM   
tshinder

 

Posts: 47420
Joined: 10.Jan.2001
From: Texas
Status: offline
That would work fine.

Thanks!
Tom

_____________________________

Thomas W Shinder, M.D.
Sr. Consultant/Technical Writer
Prowess Consulting http://www.prowessconsulting.com/
Blog: http://blogs.isaserver.org/shinder/

GET THE NEW ISA 2006 Book!: http://tinyurl.com/2gpoo8

(in reply to winstroll)
Post #: 10

Page:   [1] << Older Topic    Newer Topic >>
All Forums >> [ISA 2006 General] >> General >> WSUS 3.0 SP1 behind ISA 2006 Page: [1]
Jump to:

New Messages No New Messages
Hot Topic w/ New Messages Hot Topic w/o New Messages
Locked w/ New Messages Locked w/o New Messages
 Post New Thread
 Reply to Message
 Post New Poll
 Submit Vote
 Delete My Own Post
 Delete My Own Thread
 Rate Posts