Welcome to ISAserver.org

Forums | Register | Login | My Profile | Inbox | RSS RSS icon | My Subscription | My Forums | Address Book | Member List | Search | FAQ | Ticket List | Log Out

WSUS and ISA

Users viewing this topic: none

Logged in as: Guest
  Printable Version
All Forums >> [ISA Server 2004 General ] >> General >> WSUS and ISA Page: [1]
Login
Message << Older Topic   Newer Topic >>
WSUS and ISA - 10.May2006 2:24:53 PM   
jbarrett@slrsd.org

 

Posts: 16
Joined: 15.Feb.2006
Status: offline 		 
Hello,

Here is my Problem. I'm running ISA Server 2004, and on seperate server WSUS, all in 2003 environment. WSUS is syncronizing fine with updates. It's updating clients and servers, except my ISA Server hasn't reported yet. It has bee about a week and a half. The ISA Server is in an OU with other servers and those Servers reported right away. Any Ideas?

Thanks

Jackie
Post #: 1
RE: WSUS and ISA - 10.May2006 2:51:51 PM   
SanMan

 

Posts: 50
Joined: 23.Feb.2001
From: ZA
Status: offline 		Hi Jackie,
I would run the logging and see what error if any you get. I would also check the firewall rules... maybe the ISA server is not to keen on the WSUS Server polling it???
HTH
SM

(in reply to jbarrett@slrsd.org)
Post #: 2
RE: WSUS and ISA - 10.May2006 2:55:06 PM   
LLigetfa

 

Posts: 2184
Joined: 10.Aug.2004
From: fort frances.on.ca
Status: offline 		Did you create a rule to allow it?  ISA is secure by default.  My ISA updates from WSUS just fine.

_____________________________

The School of Hard Knocks is a mean teacher. She gives the exam before the lesson.

(in reply to SanMan)
Post #: 3
RE: WSUS and ISA - 10.May2006 4:04:41 PM   
shab

 

Posts: 2
Joined: 10.May2006
Status: offline 		Would you be able to tell us what rule you setup to allow WSUS to update the ISA server. I have a rule to allow all  from the WSUS server to the local host but the ISA server has not received any updates, however in WSUS it states that the status has not been reported yet (blue circle with 'i').

Thanks for your help.

(in reply to LLigetfa)
Post #: 4
RE: WSUS and ISA - 10.May2006 4:10:59 PM   
LLigetfa

 

Posts: 2184
Joined: 10.Aug.2004
From: fort frances.on.ca
Status: offline 		Does your allow rule use localhost in the from/to?
Did you define the WSUS server as *direct*?

_____________________________

The School of Hard Knocks is a mean teacher. She gives the exam before the lesson.

(in reply to shab)
Post #: 5
RE: WSUS and ISA - 10.May2006 4:16:44 PM   
shab

 

Posts: 2
Joined: 10.May2006
Status: offline 		I have the local host in TO only and have the WSUS computer object in FROM.

From the sounds of what you are asking it looks like I need to have local host in FROM as well?

(in reply to LLigetfa)
Post #: 6
RE: WSUS and ISA - 10.May2006 4:23:39 PM   
elmajdal

 

Posts: 5028
Joined: 16.Sep.2004
From: Lebanese in Kuwait
Status: offline 		hi guys,
check this article:  Allowing the ISA 2004 Server to use Windows Update Services



_____________________________

Tarek Majdalani

MS Forefront Edge Security MVP
Website : http://www.elmajdal.net/ISAServer
New Section : http://www.elmajdal.net/Win2k8

(in reply to jbarrett@slrsd.org)
Post #: 7
RE: WSUS and ISA - 30.May2006 6:33:12 PM   
jbarrett@slrsd.org

 

Posts: 16
Joined: 15.Feb.2006
Status: offline 		 
I have setup ISA Server and WSUS according to article published here. If I try to get to WSUS through web browser 
http://server:8350/wsusadmin it will not connect. WSUS is synchronizing fine.
Here is what i am getting when I run the client tool on ISA Server. Thanks Jackie


WSUS Client Diagnostics Tool
Checking Machine State
       Checking for admin rights to run tool . . . . . . . . . PASS
       Automatic Updates Service is running. . . . . . . . . . PASS
       Background Intelligent Transfer Service is running. . . PASS
       Wuaueng.dll version 5.8.0.2469. . . . . . . . . . . . . PASS
               This version is WSUS 2.0
Checking AU Settings
       AU Option is 4: Scheduled Install . . . . . . . . . . . PASS
               Option is from Policy settings
Checking Proxy Configuration
       Checking for winhttp local machine Proxy settings . . . PASS
               Winhttp local machine access type
                       <Direct Connection>
               Winhttp local machine Proxy. . . . . . . . . .  NONE
               Winhttp local machine ProxyBypass. . . . . . .  NONE
       Checking User IE Proxy settings . . . . . . . . . . . . PASS
               User IE Proxy. . . . . . . . . . . . . . . . .  NONE
               User IE ProxyByPass. . . . . . . . . . . . . .  NONE
               User IE AutoConfig URL Proxy . . . . . . . . .  NONE
               User IE AutoDetect
               AutoDetect not in use
Checking Connection to WSUS/SUS Server
               WUServer = http://server:8530
               WUStatusServer = http://server:8530
       UseWuServer is enabled. . . . . . . . . . . . . . . . . PASS
VerifyWUServerURL() failed with hr=0x80072efd
A connection with the server could not be established

Press Enter to Complete

(in reply to elmajdal)
Post #: 8
RE: WSUS and ISA - 31.May2006 1:08:59 AM   
elmajdal

 

Posts: 5028
Joined: 16.Sep.2004
From: Lebanese in Kuwait
Status: offline 		have u tried with 
http://IP:8350/wsusadmin ?

_____________________________

Tarek Majdalani

MS Forefront Edge Security MVP
Website : http://www.elmajdal.net/ISAServer
New Section : http://www.elmajdal.net/Win2k8

(in reply to jbarrett@slrsd.org)
Post #: 9
RE: WSUS and ISA - 31.May2006 3:18:12 AM   
LLigetfa

 

Posts: 2184
Joined: 10.Aug.2004
From: fort frances.on.ca
Status: offline 		Why are you trying to run WSUSAdmin from the ISA server?

_____________________________

The School of Hard Knocks is a mean teacher. She gives the exam before the lesson.

(in reply to elmajdal)
Post #: 10
RE: WSUS and ISA - 31.May2006 1:49:56 PM   
jbarrett@slrsd.org

 

Posts: 16
Joined: 15.Feb.2006
Status: offline 		I'm not try to get to the WSUS Server but I'm try to troubleshoot why WSUS is not updating my ISA Server. Every other Server and Workstation has replied to WSUS except the ISA Server I am getting the following warning event in Event Viewer:
Unable to connect: Windows is unable to connect to the Automatic Updates service and therefore cannot download and install updates according to the set schedule. Windows will continue to try to establish a connection.

Thanks

Jackie

(in reply to LLigetfa)
Post #: 11
RE: WSUS and ISA - 23.Jun.2008 6:27:36 AM   
Fr0sT

 

Posts: 5
Joined: 30.May2008
Status: offline 		I know the thread is old but I had the same issue and found a solution - if you're using custom WSUS port (8530) you must define this as a custom TCP protocol in your ISA to WSUS access rule. Otherwise it'll get blocked as unidentified IP trafic.

(in reply to jbarrett@slrsd.org)
Post #: 12

Page:   [1] << Older Topic    Newer Topic >>
All Forums >> [ISA Server 2004 General ] >> General >> WSUS and ISA Page: [1]
Jump to:

New Messages No New Messages
Hot Topic w/ New Messages Hot Topic w/o New Messages
Locked w/ New Messages Locked w/o New Messages
 Post New Thread
 Reply to Message
 Post New Poll
 Submit Vote
 Delete My Own Post
 Delete My Own Thread
 Rate Posts