• RSS
  • Twitter
  • FaceBook

Welcome to ISAserver.org

Forums | Register | Login | My Profile | Inbox | RSS RSS icon | My Subscription | My Forums | Address Book | Member List | Search | FAQ | Ticket List | Log Out

XP SP2 and Windows Update

Users viewing this topic: none

Logged in as: Guest
  Printable Version
All Forums >> [ISA Server 2000 Firewall] >> Firewall Client >> XP SP2 and Windows Update Page: [1] 2   next >   >>
Login
Message << Older Topic   Newer Topic >>
XP SP2 and Windows Update - 16.Aug.2004 7:47:00 PM   
bayowin

 

Posts: 11
Joined: 14.Jul.2001
From: Lakeland
Status: offline
After installing XP SP2 on several test machines, I am no longer able to use Windows Update as a web-proxy client or firewall client. It works fine as a S-NAT client. The Windows Update page comes up and installs a new version of the Installer, but then fails when looking for updates. Anybody seen this? Thanks.
Post #: 1
RE: XP SP2 and Windows Update - 24.Aug.2004 10:08:00 PM   
huffy2404

 

Posts: 5
Joined: 30.Dec.2002
From: Texas
Status: offline
I am having the same problem. Very frustrating. [Mad]

(in reply to bayowin)
Post #: 2
RE: XP SP2 and Windows Update - 25.Aug.2004 3:48:00 AM   
Jason

 

Posts: 49
Joined: 7.May2001
From: US
Status: offline
I have been seeing this to - both pre and post sp2 - seems to me that the new windows update is failing with isa somehow. Havent tried snat but bringing the machine outside of ISA does work. U guys ever find a fix?

Thx

(in reply to bayowin)
Post #: 3
RE: XP SP2 and Windows Update - 25.Aug.2004 8:21:00 PM   
spouseele

 

Posts: 12830
Joined: 1.Jun.2001
From: Belgium
Status: offline
Hey guys,

check out http://forums.isaserver.org/ultimatebb.cgi?ubb=get_topic;f=4;t=000973 .

You should contact PSS and scream loud and long about this... I've done it but no solution yet, except not requesting authentication for those protocol and site&content rules rules.

HTH,
Stefaan

(in reply to bayowin)
Post #: 4
RE: XP SP2 and Windows Update - 25.Aug.2004 9:19:00 PM   
Jason

 

Posts: 49
Joined: 7.May2001
From: US
Status: offline
Stefaan,

Thx - will do and post back what they suggest - thanks again.

Jason

(in reply to bayowin)
Post #: 5
RE: XP SP2 and Windows Update - 26.Aug.2004 3:50:00 PM   
MJonkers

 

Posts: 63
Joined: 6.Jan.2004
Status: offline
Stefaan,

Great this works!

Thanks,

Marc

(in reply to bayowin)
Post #: 6
RE: XP SP2 and Windows Update - 27.Aug.2004 1:47:00 AM   
Jason

 

Posts: 49
Joined: 7.May2001
From: US
Status: offline
Stefaan,

Called today and started a case - havent totally confirmed its a bug but thats what they are suggesting. No fix yet - work around we found was to assign the default gateway and that will get it to work but I dont really want todo that. They did some traces and escalated the case higher.

Will let you know what they say.
J

(in reply to bayowin)
Post #: 7
RE: XP SP2 and Windows Update - 27.Aug.2004 12:28:00 PM   
spouseele

 

Posts: 12830
Joined: 1.Jun.2001
From: Belgium
Status: offline
Hi Jason,

the recommended workaround is to configure the rules for those destinations to apply *only* to a client address set. The problem is an authentication issue with the Windows Update controls.

HTH,
Stefaan

(in reply to bayowin)
Post #: 8
RE: XP SP2 and Windows Update - 3.Sep.2004 9:12:00 PM   
Jason

 

Posts: 49
Joined: 7.May2001
From: US
Status: offline
Hey Stefaan,

Sorry - been swamped and havent had time to reply. Its funny as MS didnt really have a suggestion besides using the default gateway which will allow it to work or setting up a WUS server to update from locally.

I seen a coworker with XP able to do his Windows Update and after investigating - basically same setup as mine - if you disable the Firewall client and make IE a Webproxy client (still no default gateway)- it worked on his. I wasnt able to get mine to go until I un-registered the wuweb.dll file, deleted all temporary and offline files, and then rebooted - went to windows update - it installed the active x file (wuweb.dll) and registered it and then worked with the web proxy. Kind of odd.

For your suggestion - how would I accomplish that? I would include a client address set that included my lan? Then what destinations - all the MS windows update URLs?

thanks again for all the help,
J

(in reply to bayowin)
Post #: 9
RE: XP SP2 and Windows Update - 4.Sep.2004 11:16:00 AM   
spouseele

 

Posts: 12830
Joined: 1.Jun.2001
From: Belgium
Status: offline
Hi Jason,

it all depends on how your outbound policy is defined.

To understand when a request will be send by the client as a Web Proxy, Firewall or SecureNAT request, check out my article http://www.isaserver.org/articles/IPSec_Passthrough.html section '4. Configuring ISA Clients'.

So, for a Firewall client request and assuming that the HTTP Redirector is disabled, the authentication is handled by the Firewall client itself, not by the application. So, this should definitely work with a rules who applies to user/group membership.

For a Web Proxy request (not through the HTTP Redirector) it should work if you have a site&control rule who applies to a client address set which contains your LAT. As destination set I allow '*.microsoft.com' and *.windowsupdate.com'.

For a SecureNAT request, assuming that the HTTP Redirector is disabled, the same rule as for a Web Proxy request should do the trick.

HTH,
Stefaan

(in reply to bayowin)
Post #: 10
RE: XP SP2 and Windows Update - 5.Sep.2004 11:34:00 AM   
spouseele

 

Posts: 12830
Joined: 1.Jun.2001
From: Belgium
Status: offline
Hey guys,

here is the latest update for this problem:
quote:
From: Jim Harrison [jim@isatools.org]
Sent: zaterdag 4 september 2004 23:54
To: [ISAserver.org Discussion List]
Subject: [isalist] Windows Update v5 issues and workaround

Importance: High

http://www.ISAserver.org

Hello everyone,

The core cause of this problem is still being worked out, but a clear workaround is available and it boils down to two things:
- Disable authentication for Windows Update requests.
- Disable "global authentication" for web proxy requests

Note: you may have heard that the "ReturnDeniedIfAuthenticated registry setting explained in http://support.microsoft.com/?id=297324
is part of the problem. While applying this setting to ISA 2000 does help expose the WU authentication problems, it is not the cause. If you have applied this setting to your ISA 2000 Server, you did so with good reason to solve a specific problem. You should not remove this setting if you have applied it. By the same token, if you are not experiencing the problem outlined in this KB article, you don't need to and shouldn't apply it. The above article applies only to ISA 2000; you should not apply any ISA 2000 registry settings to ISA 2004 unless the relevant KB article explicitly instructs you to. Currently, none do.

Now let's get on with the workaround.
Per the WU team, there are four destinations that should be included for creating anonymous Windows Update access policies:

TABLE 1
Item FQDN
1 *.download.microsoft.com
2 *.windowsupdate.com
3 *.windowsupdate.microsoft.com
4 windowsupdate.microsoft.com

For ISA 2000
Disable "global" authentication for web proxy requests
1. Open the ISA Manglement MMC
2. Select View, then Advanced
3. Expand Servers and Arrays
4. R-click <ArrayName>, select Properties
5. Select Outgoing Web Requests
6. Uncheck Ask Unauthenticated users for identification
7. Click Apply,
8. When prompted, select Save the changes and restart the service(s)
9. Click OK

Create a destination set for Windows Update domains
1. Expand <ArrayName> and PolicyElements
2. R-click Destination Sets, select New, then Set
3. Enter WindowsUpdate in the Name field, click Next
4. Click Add
5. Enter *.download.microsoft.com in the Domain field
6. Leave the Path field blank
7. Click OK
8. Repeat steps 4 through 7 for each remaining entry in Table 1
9. Click OK

Create an anonymous Site and Content rule for Windows Update requests
1. Expand Access Policy
2. R-click Site and Content Rules, select New, then Rule
3. Enter Windows Update in the Name field, click Next
4. Select Allow, click Next
5. Select Allow access based on destination, click Next
6. In the Apply this rule to: drop-down list, select Specified Destination Set
7. In the Name: drop-down list, select Windows Update
8. Click Next, then Finish

For ISA 2004
Disable "global" authentication for web proxy requests
1. Open the ISA Manglement MMC
2. Expand <ArrayName>, then Configuration
3. Select Networks
4. In the middle pane, select the Networks tab
5. R-click Internal and select Properties
6. Select the Web Proxy tab
7. Click Authentication
8. In the Authentication window, uncheck Require all users to authenticate, click OK
9. Click Apply, then OK
10. Repeat steps 5 through 9 for each network object where you allow Web Proxy requests

Create an anonymous Access Rule for Windows Update
1. In the left pane, R-click Firewall Policy and select New, then Access Rule
2. Enter Windows Update in the Name field, click Next
3. Select Allow, click Next
4. In the This rule applies to: drop-down list, select Selected Protocols
5. Click Add
6. In the Add Protocols dialog, expand Web
7. Select HTTP and click Add
8. Select HTTPS and click Add
9. Click Close, then Next
10. In the Access Rule Sources dialog, click Add
11. In the Add Network Entities dialog, expand Networks
12. Select Internal and click Add
13. For each network where you unchecked Require all users to authenticate, select that network object and click Add
14. Click Close, then Next
15. In the Access Rule Destinations window, click Add
16. In the Add Network Entities window menu bar, click New, then Domain Name Set
17. In the New Domain Name Set Policy Element window, enter Windows Update in the Name field
18. Click New
19. In the Domain names included in this set list, change the new entry to *.download.microsoft.com
20. Repeat steps 19 and 20 for each remaining entry in Table 1
21. Click OK
22. In the New Domain Name Set Policy Element window, select Windows Update, click Add, then Close
23. Click Next, Next, then Finish
24. In the top part of the middle pane, Apply and Discard buttons will appear; click Apply
25. When Apply New Configuration dialog reports "Changes to the configuration were successfully applied", click OK

Make the Windows Update rule the first rule
NOTE: If you prefer to list all of your deny rules first, then you can make the Window Update rule the first rule following them
1. In the left pane, select Firewall Policy
2. If Windows Update is already the first rule in the list, stop here
3. In the middle pane, select Windows Update
4. In the right pane select the Tasks tab
5. Click Move the selected rule up until Windows Update is the first rule in the list
6. In the top part of the middle pane, Apply and Discard buttons should appear; click Apply
7. When Apply New Configuration dialog reports "Changes to the configuration were successfully applied", click OK

Look for a WU KB soon that details the that side of the issue and cross-links to an ISA KB with these instructions.

Jim Harrison
MCP(NT4, W2K), A+, Network+, PCG
http://isaserver.org/Jim_Harrison/
http://isatools.org
Read the help / books / articles!

HTH,
Stefaan

[ September 05, 2004, 11:42 AM: Message edited by: spouseele ]

(in reply to bayowin)
Post #: 11
RE: XP SP2 and Windows Update - 7.Sep.2004 8:51:00 PM   
Jason

 

Posts: 49
Joined: 7.May2001
From: US
Status: offline
Stefaan,

I still cannot get this to go.

I have the HTTP Redirector enabled and set to redirect to local web proxy service. Must it be off to work?

If not - I do not have the outgoing web requester set to ask for authentication. I also have a site and content rule that allows all to any requesting client.

Again Im just using firewall clients but I know that the web proxy client by itself does work.

Sorry to be a pain,
Jason

(in reply to bayowin)
Post #: 12
RE: XP SP2 and Windows Update - 7.Sep.2004 9:46:00 PM   
spouseele

 

Posts: 12830
Joined: 1.Jun.2001
From: Belgium
Status: offline
Hi Jason,

can you post an excerpt of the ISA Firewall and Web Proxy log? Just make sure you have enabled the logging of all fields and that the log format is set to ISA format.

HTH,
Stefaan

(in reply to bayowin)
Post #: 13
RE: XP SP2 and Windows Update - 8.Sep.2004 10:40:00 PM   
Jason

 

Posts: 49
Joined: 7.May2001
From: US
Status: offline
Hey Stefaan,

Heres the logs: usernames - internal IPs - rule name have been changed:

Firewall excerpt:
192.168.0.32, XXXXX, IEXPLORE.EXE:3:5.1, N, 9/8/2004, 13:29:31, fwsrv, ISA, -, windowsupdate.microsoft.com, 207.46.134.92, 0, -, 0, 0, -, -, GHBN, -, -, -, 0, 0, Terminal Services for ISA, Allow rule, 6732, 0
192.168.0.32, XXXXX, IEXPLORE.EXE:3:5.1, N, 9/8/2004, 13:29:32, fwsrv, ISA, -, -, 207.46.134.92, 80, -, 0, 0, 80, TCP, Connect, -, -, -, 0, 0, XXX Rule, -, 6732, 434082
192.168.0.32, XXXXX, IEXPLORE.EXE:3:5.1, N, 9/8/2004, 13:29:32, fwsrv, ISA, -, -, 207.46.134.92, 80, 218, 0, 3575, 80, TCP, Connect, -, -, -, 20001, 0, XXX Rule, -, 6732, 434082
192.168.0.32, XXXXX, IEXPLORE.EXE:3:5.1, N, 9/8/2004, 13:29:32, fwsrv, ISA, -, -, 207.46.134.92, 80, -, 0, 0, 80, TCP, Connect, -, -, -, 0, 0, XXX Rule, -, 6732, 434083
192.168.0.32, XXXXX, IEXPLORE.EXE:3:5.1, N, 9/8/2004, 13:29:32, fwsrv, ISA, -, v5.windowsupdate.microsoft.com, 64.4.23.188, 0, -, 0, 0, -, -, GHBN, -, -, -, 0, 0, Terminal Services for ISA, Allow rule, 6732, 0
192.168.0.32, XXXXX, IEXPLORE.EXE:3:5.1, N, 9/8/2004, 13:29:33, fwsrv, ISA, -, -, 207.46.156.88, 80, -, 0, 0, 80, TCP, Connect, -, -, -, 0, 0, XXX Rule, -, 6732, 434084
192.168.0.32, XXXXX, IEXPLORE.EXE:3:5.1, N, 9/8/2004, 13:29:33, fwsrv, ISA, -, -, 207.46.156.88, 80, -, 0, 0, 80, TCP, Connect, -, -, -, 0, 0, XXX Rule, -, 6732, 434085
192.168.0.32, XXXXX, IEXPLORE.EXE:3:5.1, N, 9/8/2004, 13:29:36, fwsrv, ISA, -, -, 207.46.156.88, 80, 3453, 0, 67155, 80, TCP, Connect, -, -, -, 20001, 0, XXX Rule, -, 6732, 434084
192.168.0.32, XXXXX, IEXPLORE.EXE:3:5.1, N, 9/8/2004, 13:29:36, fwsrv, ISA, -, -, 207.46.156.88, 80, -, 0, 0, 80, TCP, Connect, -, -, -, 0, 0, XXX Rule, -, 6732, 434087
192.168.0.32, XXXXX, IEXPLORE.EXE:3:5.1, N, 9/8/2004, 13:29:38, fwsrv, ISA, -, -, 207.46.156.88, 80, 4172, 0, 94815, 80, TCP, Connect, -, -, -, 20001, 0, XXX Rule, -, 6732, 434085
192.168.0.32, XXXXX, IEXPLORE.EXE:3:5.1, N, 9/8/2004, 13:29:38, fwsrv, ISA, -, -, 207.46.156.88, 80, -, 0, 0, 80, TCP, Connect, -, -, -, 0, 0, XXX Rule, -, 6732, 434088
192.168.0.32, XXXXX, IEXPLORE.EXE:3:5.1, N, 9/8/2004, 13:29:38, fwsrv, ISA, -, -, 207.46.156.88, 80, 1625, 0, 11127, 80, TCP, Connect, -, -, -, 20001, 0, XXX Rule, -, 6732, 434087
192.168.0.32, XXXXX, IEXPLORE.EXE:3:5.1, N, 9/8/2004, 13:29:38, fwsrv, ISA, -, -, 207.46.156.88, 80, -, 0, 0, 80, TCP, Connect, -, -, -, 0, 0, XXX Rule, -, 6732, 434089
192.168.0.32, XXXXX, IEXPLORE.EXE:3:5.1, N, 9/8/2004, 13:29:38, fwsrv, ISA, -, -, 207.46.156.88, 80, 94, 0, 7344, 80, TCP, Connect, -, -, -, 20001, 0, XXX Rule, -, 6732, 434088
192.168.0.32, XXXXX, IEXPLORE.EXE:3:5.1, N, 9/8/2004, 13:29:40, fwsrv, ISA, -, download.windowsupdate.com, 208.172.13.253, 0, -, 0, 0, -, -, GHBN, -, -, -, 0, 0, Terminal Services for ISA, Allow rule, 6732, 0
192.168.0.32, XXXXX, IEXPLORE.EXE:3:5.1, N, 9/8/2004, 13:29:40, fwsrv, ISA, -, -, 64.4.23.93, 80, -, 0, 0, 80, TCP, Connect, -, -, -, 0, 0, XXX Rule, -, 6732, 434091
192.168.0.32, XXXXX, IEXPLORE.EXE:3:5.1, N, 9/8/2004, 13:29:40, fwsrv, ISA, -, -, 64.4.23.93, 80, 78, 0, 311, 80, TCP, Connect, -, -, -, 20000, 0, XXX Rule, -, 6732, 434091
192.168.0.32, XXXXX, IEXPLORE.EXE:3:5.1, N, 9/8/2004, 13:29:40, fwsrv, ISA, -, -, 64.4.23.93, 80, -, 0, 0, 80, TCP, Connect, -, -, -, 0, 0, XXX Rule, -, 6732, 434092
192.168.0.32, XXXXX, IEXPLORE.EXE:3:5.1, N, 9/8/2004, 13:29:40, fwsrv, ISA, -, -, 207.46.156.88, 80, 2891, 0, 3722, 80, TCP, Connect, -, -, -, 20000, 0, XXX Rule, -, 6732, 434089
192.168.0.32, XXXXX, IEXPLORE.EXE:3:5.1, N, 9/8/2004, 13:29:41, fwsrv, ISA, -, -, 207.46.156.88, 80, -, 0, 0, 80, TCP, Connect, -, -, -, 0, 0, XXX Rule, -, 6732, 434093
192.168.0.32, XXXXX, IEXPLORE.EXE:3:5.1, N, 9/8/2004, 13:29:41, fwsrv, ISA, -, -, 207.46.156.88, 80, 62, 0, 333, 80, TCP, Connect, -, -, -, 20000, 0, XXX Rule, -, 6732, 434093
192.168.0.32, XXXXX, IEXPLORE.EXE:3:5.1, N, 9/8/2004, 13:29:41, fwsrv, ISA, -, -, 207.46.156.88, 80, -, 0, 0, 80, TCP, Connect, -, -, -, 0, 0, XXX Rule, -, 6732, 434094
192.168.0.32, XXXXX, IEXPLORE.EXE:3:5.1, N, 9/8/2004, 13:29:47, fwsrv, ISA, -, c.microsoft.com, 207.46.157.156, 0, -, 0, 0, -, -, GHBN, -, -, -, 0, 0, Terminal Services for ISA, Allow rule, 6732, 0
192.168.0.32, XXXXX, IEXPLORE.EXE:3:5.1, N, 9/8/2004, 13:29:48, fwsrv, ISA, -, -, 207.46.157.156, 80, -, 0, 0, 80, TCP, Connect, -, -, -, 0, 0, XXX Rule, -, 6732, 434095
192.168.0.32, XXXXX, IEXPLORE.EXE:3:5.1, N, 9/8/2004, 13:29:48, fwsrv, ISA, -, -, 207.46.157.156, 80, -, 0, 0, 80, TCP, Connect, -, -, -, 0, 0, XXX Rule, -, 6732, 434096
192.168.0.32, XXXXX, IEXPLORE.EXE:3:5.1, N, 9/8/2004, 13:29:48, fwsrv, ISA, -, -, 207.46.157.156, 80, -, 0, 0, 80, TCP, Connect, -, -, -, 20000, 0, XXX Rule, -, 6732, 434096
192.168.0.32, XXXXX, IEXPLORE.EXE:3:5.1, N, 9/8/2004, 13:30:32, fwsrv, ISA, -, v5stats.windowsupdate.microsoft.com, 207.46.253.221, 0, -, 0, 0, -, -, GHBN, -, -, -, 0, 0, Terminal Services for ISA, Allow rule, 6732, 0
192.168.0.32, XXXXX, IEXPLORE.EXE:3:5.1, N, 9/8/2004, 13:30:37, fwsrv, ISA, -, -, 207.46.253.221, 80, -, 0, 0, 80, TCP, Connect, -, -, -, 0, 0, XXX Rule, -, 6732, 434177
192.168.0.32, XXXXX, IEXPLORE.EXE:3:5.1, N, 9/8/2004, 13:30:37, fwsrv, ISA, -, -, 207.46.134.92, 80, 64312, 0, 281, 80, TCP, Connect, -, -, -, 20001, 0, XXX Rule, -, 6732, 434083
192.168.0.32, XXXXX, IEXPLORE.EXE:3:5.1, N, 9/8/2004, 13:30:42, fwsrv, ISA, -, -, 64.4.23.93, 80, 61469, 0, 7512, 80, TCP, Connect, -, -, -, 20001, 0, XXX Rule, -, 6732, 434092

Webproxy log:
192.168.0.32, anonymous, Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322), N, 9/8/2004, 13:29:32, w3proxy, ISA, -, windowsupdate.microsoft.com, 207.46.249.56, 80, 187, 734, 3575, http, TCP, GET, http://windowsupdate.microsoft.com/, text/html, VFInet, 200, 0x40801002, XXX Rule, Allow rule
192.168.0.32, anonymous, Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322), N, 9/8/2004, 13:29:32, w3proxy, ISA, -, windowsupdate.microsoft.com, 207.46.249.56, 80, 62, 629, 281, http, TCP, GET, http://windowsupdate.microsoft.com/redirect.js, application/x-javascript, VCache, 304, 0x801002, XXX Rule, Allow rule
192.168.0.32, anonymous, Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322), N, 9/8/2004, 13:29:33, w3proxy, ISA, -, v5.windowsupdate.microsoft.com, 207.46.157.29, 80, 109, 651, 435, http, TCP, GET, http://v5.windowsupdate.microsoft.com/, text/html, Inet, 302, 0x40020000, XXX Rule, Allow rule
192.168.0.32, anonymous, Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322), N, 9/8/2004, 13:29:33, w3proxy, ISA, -, v5.windowsupdate.microsoft.com, 207.46.157.29, 80, 63, 674, 2648, http, TCP, GET, http://v5.windowsupdate.microsoft.com/v5consumer/default.aspx, text/html; charset=utf-8, Inet, 200, 0x41e10000, XXX Rule, Allow rule
192.168.0.32, anonymous, Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322), N, 9/8/2004, 13:29:33, w3proxy, ISA, -, v5.windowsupdate.microsoft.com, 207.46.157.29, 80, 203, 683, 16536, http, TCP, GET, http://v5.windowsupdate.microsoft.com/v5consumer/default.aspx?ln=en-us, text/html; charset=utf-8, Inet, 200, 0x41e10000, XXX Rule, Allow rule
192.168.0.32, anonymous, Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322), N, 9/8/2004, 13:29:33, w3proxy, ISA, -, v5.windowsupdate.microsoft.com, 207.46.157.29, 80, 78, 624, 3191, http, TCP, GET, http://v5.windowsupdate.microsoft.com/v5consumer/shared/js/tgar.js?9/8/2004%2010:29:04%20AM, application/x-javascript, Inet, 200, 0x40840000, XXX Rule, Allow rule
192.168.0.32, anonymous, Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322), N, 9/8/2004, 13:29:34, w3proxy, ISA, -, v5.windowsupdate.microsoft.com, 207.46.157.29, 80, 109, 628, 9385, http, TCP, GET, http://v5.windowsupdate.microsoft.com/v5consumer/shared/js/redirect.js?9/8/2004%2010:29:04%20AM, application/x-javascript, Inet, 200, 0x40840000, XXX Rule, Allow rule
192.168.0.32, anonymous, Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322), N, 9/8/2004, 13:29:34, w3proxy, ISA, -, v5.windowsupdate.microsoft.com, 207.46.157.29, 80, 188, 629, 26317, http, TCP, GET, http://v5.windowsupdate.microsoft.com/v5consumer/shared/js/commontop.js?9/8/2004%2010:29:04%20AM, application/x-javascript, Inet, 200, 0x40840000, XXX Rule, Allow rule
192.168.0.32, anonymous, Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322), N, 9/8/2004, 13:29:34, w3proxy, ISA, -, v5.windowsupdate.microsoft.com, 207.46.157.29, 80, 375, 629, 51360, http, TCP, GET, http://v5.windowsupdate.microsoft.com/v5consumer/shared/js/webcomtop.js?9/8/2004%2010:29:04%20AM, application/x-javascript, Inet, 200, 0x40840000, XXX Rule, Allow rule
192.168.0.32, anonymous, Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322), N, 9/8/2004, 13:29:35, w3proxy, ISA, -, v5.windowsupdate.microsoft.com, 207.46.157.29, 80, 63, 626, 1331, http, TCP, GET, http://v5.windowsupdate.microsoft.com/v5consumer/shared/js/survey.js?9/8/2004%2010:29:04%20AM, application/x-javascript, Inet, 200, 0x40840000, XXX Rule, Allow rule
192.168.0.32, anonymous, Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322), N, 9/8/2004, 13:29:35, w3proxy, ISA, -, v5.windowsupdate.microsoft.com, 207.46.157.29, 80, 63, 631, 873, http, TCP, GET, http://v5.windowsupdate.microsoft.com/v5consumer/shared/js/spupdateids.js?9/8/2004%2010:29:04%20AM, application/x-javascript, Inet, 200, 0x40840000, XXX Rule, Allow rule
192.168.0.32, anonymous, Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322), N, 9/8/2004, 13:29:35, w3proxy, ISA, -, v5.windowsupdate.microsoft.com, 207.46.157.29, 80, 94, 766, 6731, http, TCP, GET, http://v5.windowsupdate.microsoft.com/v5consumer/mstoolbar.aspx?ln=en-us, text/html; charset=utf-8, Inet, 200, 0x41e10000, XXX Rule, Allow rule
192.168.0.32, anonymous, Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322), N, 9/8/2004, 13:29:35, w3proxy, ISA, -, v5.windowsupdate.microsoft.com, 207.46.157.29, 80, 62, 770, 2090, http, TCP, GET, http://v5.windowsupdate.microsoft.com/v5consumer/splash.aspx?page=0&ln=en-us, text/html; charset=utf-8, Inet, 200, 0x41e10000, XXX Rule, Allow rule
192.168.0.32, anonymous, Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322), N, 9/8/2004, 13:29:36, w3proxy, ISA, -, v5.windowsupdate.microsoft.com, 64.4.23.188, 80, 265, 760, 5101, http, TCP, GET, http://v5.windowsupdate.microsoft.com/v5consumer/toc.aspx?ln=en-us, text/html; charset=utf-8, Inet, 200, 0x41e10000, XXX Rule, Allow rule
192.168.0.32, anonymous, Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322), N, 9/8/2004, 13:29:36, w3proxy, ISA, -, v5.windowsupdate.microsoft.com, 207.46.157.29, 80, 93, 763, 4899, http, TCP, GET, http://v5.windowsupdate.microsoft.com/v5consumer/footer.aspx?ln=en-us, text/html; charset=utf-8, Inet, 200, 0x41e10000, XXX Rule, Allow rule
192.168.0.32, anonymous, Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322), N, 9/8/2004, 13:29:36, w3proxy, ISA, -, v5.windowsupdate.microsoft.com, 207.46.157.29, 80, 78, 638, 3288, http, TCP, GET, http://v5.windowsupdate.microsoft.com/library/toolbar/3.0/css.aspx?c=/v5consumer/Config/en/shell.config, text/css; charset=utf-8, Inet, 200, 0x41e10000, XXX Rule, Allow rule
192.168.0.32, anonymous, Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322), N, 9/8/2004, 13:29:36, w3proxy, ISA, -, v5.windowsupdate.microsoft.com, 64.4.23.188, 80, 78, 605, 3191, http, TCP, GET, http://v5.windowsupdate.microsoft.com/v5consumer/shared/js/tgar.js, application/x-javascript, Inet, 200, 0x40840000, XXX Rule, Allow rule
192.168.0.32, anonymous, Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322), N, 9/8/2004, 13:29:36, w3proxy, ISA, -, v5.windowsupdate.microsoft.com, 64.4.23.188, 80, 141, 719, 2977, http, TCP, GET, http://v5.windowsupdate.microsoft.com/library/toolbar/3.0/images/banners/windows_masthead_ltr.gif, image/gif, VFInet, 200, 0x40801002, XXX Rule, Allow rule
192.168.0.32, anonymous, Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322), N, 9/8/2004, 13:29:36, w3proxy, ISA, -, v5.windowsupdate.microsoft.com, 207.46.157.29, 80, 141, 723, 7211, http, TCP, GET, http://v5.windowsupdate.microsoft.com/library/toolbar/3.0/subbanner.aspx?t=V2luZG93cyBVcGRhdGU%3d&f=FFFFFF&b=5175C9&s=8EA7DD&r=False&font=Segoe%2c+13pt&v=0&c=qqGFWsSc4v0WWerYH8dwE2 u3wvI%3d, image/jpeg, Inet, 200, 0x41e10000, XXX Rule, Allow rule
192.168.0.32, anonymous, Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322), N, 9/8/2004, 13:29:36, w3proxy, ISA, -, v5.windowsupdate.microsoft.com, 207.46.157.29, 80, 250, 594, 12736, http, TCP, GET, http://v5.windowsupdate.microsoft.com/v5consumer/shared/js/toc.js, application/x-javascript, Inet, 200, 0x40840000, XXX Rule, Allow rule
192.168.0.32, anonymous, Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322), N, 9/8/2004, 13:29:36, w3proxy, ISA, -, v5.windowsupdate.microsoft.com, 64.4.23.188, 80, 219, 608, 8718, http, TCP, GET, http://v5.windowsupdate.microsoft.com/v5consumer/shared/js/content.js, application/x-javascript, Inet, 200, 0x40840000, XXX Rule, Allow rule
192.168.0.32, anonymous, Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322), N, 9/8/2004, 13:29:38, w3proxy, ISA, -, v5.windowsupdate.microsoft.com, 64.4.23.188, 80, 78, 683, 1670, http, TCP, GET, http://v5.windowsupdate.microsoft.com/v5consumer/shared/css/hcp.css, text/css, VFInet, 200, 0x40801002, XXX Rule, Allow rule
192.168.0.32, anonymous, Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322), N, 9/8/2004, 13:29:38, w3proxy, ISA, -, v5.windowsupdate.microsoft.com, 64.4.23.188, 80, 78, 683, 2409, http, TCP, GET, http://v5.windowsupdate.microsoft.com/v5consumer/shared/css/toc.css, text/css, VFInet, 200, 0x40801002, XXX Rule, Allow rule
192.168.0.32, anonymous, Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322), N, 9/8/2004, 13:29:38, w3proxy, ISA, -, v5.windowsupdate.microsoft.com, 207.46.157.29, 80, 94, 697, 7344, http, TCP, GET, http://v5.windowsupdate.microsoft.com/v5consumer/shared/css/content.css, text/css, VFInet, 10054, 0x40801002, XXX Rule, Allow rule
192.168.0.32, anonymous, Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322), N, 9/8/2004, 13:29:38, w3proxy, ISA, -, v5.windowsupdate.microsoft.com, 64.4.23.188, 80, 94, 717, 3391, http, TCP, GET, http://v5.windowsupdate.microsoft.com/library/toolbar/3.0/text.aspx?t=TQ%3d%3d&f=FFFFFF&b=6487DB&font=Microsoft+Logo+95%2c+13pt&w=105&h=29&a=0&l=0&v=0&c=DeMqBqiN3ORi7XLcgI%2fvxqO1O I4%3d, image/jpeg, Inet, 200, 0x41e10000, XXX Rule, Allow rule
192.168.0.32, anonymous, Windows Update Control, N, 9/8/2004, 13:29:40, w3proxy, ISA, -, download.windowsupdate.com, 67.72.4.93, 80, 78, 312, 311, http, TCP, HEAD, http://download.windowsupdate.com/msdownload/update/v5/redir/wuredir.cab?0409081726, application/octet-stream, Inet, 200, 0x40800004, XXX Rule, Allow rule
192.168.0.32, anonymous, Windows Update Control, N, 9/8/2004, 13:29:40, w3proxy, ISA, -, download.windowsupdate.com, 67.72.4.93, 80, 141, 274, 7512, http, TCP, GET, http://download.windowsupdate.com/msdownload/update/v5/redir/wuredir.cab?0409081726, application/octet-stream, Inet, 200, 0x40800000, XXX Rule, Allow rule
192.168.0.32, anonymous, Windows Update Control, N, 9/8/2004, 13:29:40, w3proxy, ISA, -, v5.windowsupdate.microsoft.com, 64.4.23.188, 80, 62, 485, 331, http, TCP, HEAD, http://v5.windowsupdate.microsoft.com/SelfUpdate/wuident.cab?0409081726, application/octet-stream, Inet, 200, 0x40800004, XXX Rule, Allow rule
192.168.0.32, anonymous, Windows Update Control, N, 9/8/2004, 13:29:41, w3proxy, ISA, -, v5.windowsupdate.microsoft.com, 64.4.23.188, 80, 62, 498, 333, http, TCP, HEAD, http://v5.windowsupdate.microsoft.com/SelfUpdate/AU/x86/XP/en/wusetup.cab?0409081726, application/octet-stream, Inet, 200, 0x40800004, XXX Rule, Allow rule
192.168.0.32, anonymous, Windows Update Control, N, 9/8/2004, 13:29:41, w3proxy, ISA, -, v5.windowsupdate.microsoft.com, 64.4.23.188, 80, 156, 460, 15427, http, TCP, GET, http://v5.windowsupdate.microsoft.com/SelfUpdate/AU/x86/XP/en/wusetup.cab?0409081726, application/octet-stream, Inet, 200, 0x40800000, XXX Rule, Allow rule
192.168.0.32, anonymous, Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322), N, 9/8/2004, 13:29:48, w3proxy, ISA, -, v5.windowsupdate.microsoft.com, 64.4.23.188, 80, 157, 799, 14859, http, TCP, GET, http://v5.windowsupdate.microsoft.com/v5consumer/splash.aspx?page=3&cpuClass=x86&auenabled=false&ln=en-us, text/html; charset=utf-8, Inet, 200, 0x41e10000, XXX Rule, Allow rule
192.168.0.32, anonymous, Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322), N, 9/8/2004, 13:29:48, w3proxy, ISA, -, v5.windowsupdate.microsoft.com, 64.4.23.188, 80, 79, 634, 3191, http, TCP, GET, http://v5.windowsupdate.microsoft.com/v5consumer/shared/js/tgar.js, application/x-javascript, Inet, 200, 0x40840000, XXX Rule, Allow rule
192.168.0.32, anonymous, Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322), N, 9/8/2004, 13:29:48, w3proxy, ISA, -, c.microsoft.com, 207.46.157.156, 80, 110, 775, 432, http, TCP, GET, http://c.microsoft.com/trans_pixel.asp?source=v5.windowsupdate&TYPE=PV&p=v5consumer_default.aspx, image/gif, Inet, 200, 0x40020000, XXX Rule, Allow rule
192.168.0.32, anonymous, Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322), N, 9/8/2004, 13:29:48, w3proxy, ISA, -, v5.windowsupdate.microsoft.com, 64.4.23.188, 80, 109, 637, 8718, http, TCP, GET, http://v5.windowsupdate.microsoft.com/v5consumer/shared/js/content.js, application/x-javascript, Inet, 200, 0x40840000, XXX Rule, Allow rule
192.168.0.32, anonymous, Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322), N, 9/8/2004, 13:29:50, w3proxy, ISA, -, v5.windowsupdate.microsoft.com, 64.4.23.188, 80, 78, 793, 2299, http, TCP, GET, http://v5.windowsupdate.microsoft.com/v5consumer/news.aspx?ln=en, text/html; charset=utf-8, Inet, 200, 0x40020000, XXX Rule, Allow rule
192.168.0.32, anonymous, Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322), N, 9/8/2004, 13:29:50, w3proxy, ISA, -, v5.windowsupdate.microsoft.com, 64.4.23.188, 80, 78, 593, 3191, http, TCP, GET, http://v5.windowsupdate.microsoft.com/v5consumer/shared/js/tgar.js, application/x-javascript, Inet, 200, 0x40840000, XXX Rule, Allow rule
192.168.0.32, anonymous, Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322), N, 9/8/2004, 13:29:50, w3proxy, ISA, -, v5.windowsupdate.microsoft.com, 64.4.23.188, 80, 110, 596, 8718, http, TCP, GET, http://v5.windowsupdate.microsoft.com/v5consumer/shared/js/content.js, application/x-javascript, Inet, 200, 0x40840000, XXX Rule, Allow rule
192.168.0.32, anonymous, Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322), N, 9/8/2004, 13:29:51, w3proxy, ISA, -, c.microsoft.com, 207.46.157.156, 80, 125, 888, 432, http, TCP, GET, http://c.microsoft.com/trans_pixel.asp?source=v5.windowsupdate&TYPE=PV&p=v5consumer_splash.aspx&r=http%3A//v5.windowsupdate.microsoft.com/v5consumer/default.aspx%3Fln%3Den-us, image/gif, Inet, 200, 0x40020000, XXX Rule, Allow rule
192.168.0.32, anonymous, Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322), N, 9/8/2004, 13:30:31, w3proxy, ISA, -, v5.windowsupdate.microsoft.com, 64.4.23.188, 80, 93, 791, 6735, http, TCP, GET, http://v5.windowsupdate.microsoft.com/v5consumer/errorinformation.aspx?error=-2147012867&ln=en-us, text/html; charset=utf-8, Inet, 200, 0x40020000, XXX Rule, Allow rule
192.168.0.32, anonymous, Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322), N, 9/8/2004, 13:30:31, w3proxy, ISA, -, v5.windowsupdate.microsoft.com, 64.4.23.188, 80, 78, 626, 3191, http, TCP, GET, http://v5.windowsupdate.microsoft.com/v5consumer/shared/js/tgar.js, application/x-javascript, Inet, 200, 0x40840000, XXX Rule, Allow rule
192.168.0.32, anonymous, Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322), N, 9/8/2004, 13:30:32, w3proxy, ISA, -, v5.windowsupdate.microsoft.com, 64.4.23.188, 80, 125, 629, 8718, http, TCP, GET, http://v5.windowsupdate.microsoft.com/v5consumer/shared/js/content.js, application/x-javascript, Inet, 200, 0x40840000, XXX Rule, Allow rule
192.168.0.32, anonymous, Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322), N, 9/8/2004, 13:30:33, w3proxy, ISA, -, c.microsoft.com, 207.46.157.156, 80, 109, 890, 432, http, TCP, GET, http://c.microsoft.com/trans_pixel.asp?source=v5.windowsupdate&TYPE=PV&p=v5consumer_errorinformation.aspx&r=http%3A//v5.windowsupdate.microsoft.com/v5consumer/default.aspx%3Fln%3De n-us, image/gif, Inet, 200, 0x40020000, XXX Rule, Allow rule
192.168.0.32, anonymous, Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322), N, 9/8/2004, 13:30:37, w3proxy, ISA, -, v5stats.windowsupdate.microsoft.com, 207.46.253.221, 80, 141, 996, 361, http, TCP, GET, http://v5stats.windowsupdate.microsoft.com/v5sitereporting/report.aspx?error=-2147012867&eventid=620&timeattarget=2004/9/8-13:27&appname=SiteEvent&updateid=12345678-1234-1234-1234- 123456789123&loc=en&procarc=X86Compatible&osvermaj=5&osvermin=1&build=2600, text/html; charset=utf-8, Inet, 200, 0x40020000, XXX Rule, Allow rule

Jason

(in reply to bayowin)
Post #: 14
RE: XP SP2 and Windows Update - 9.Sep.2004 11:03:00 PM   
spouseele

 

Posts: 12830
Joined: 1.Jun.2001
From: Belgium
Status: offline
Hi Jason,

OK, the internal clients seems indeed to be configured as Firewall clients only. So, the requests hit first the Firewall service on ISA. Then they are redirected to the Web Proxy services by the HTP Redirector. According to the logs, all seems to run well.

So, I would *disable* the HTTP Redirector and see what happens then. Of course, configuring the internal clients as Web Proxy clients too is the best solution.

HTH,
Stefaan

(in reply to bayowin)
Post #: 15
RE: XP SP2 and Windows Update - 11.Sep.2004 8:53:00 PM   
Jason

 

Posts: 49
Joined: 7.May2001
From: US
Status: offline
Stefaan,

With the redirector off it still generates the error. I find it easier to to tell the users to disable their firewall client when offline then it is to have them change the proxy which is why I do it like that.

Guess thats where the bug lies in their windows update control - they also said it affected other non isa proxies but I have not really heard of others experiencing this but on isa.

Jason

(in reply to bayowin)
Post #: 16
RE: XP SP2 and Windows Update - 12.Sep.2004 3:02:00 PM   
spouseele

 

Posts: 12830
Joined: 1.Jun.2001
From: Belgium
Status: offline
Hi Jason,

if the HTTP Redirector is disabled *and* the internal clients are only configured as Firewall clients, then Windows Update V5 should work, even if you require user/group membership on your rules. The reason for it is that in that case, the authentication is handled by the Firewall client, not by the Windows Update controls.

So, it sounds you have another issue here. Take a look in the Firewall log. Are all connections accepted? Do you see on all connections bytes send and received? What *exact* error message to you get in Windows Update?

HTH,
Stefaan

(in reply to bayowin)
Post #: 17
RE: XP SP2 and Windows Update - 13.Sep.2004 4:32:00 PM   
Jason

 

Posts: 49
Joined: 7.May2001
From: US
Status: offline
Hi Stefaan,

As far as I can tell - all connections are accepted. As for bytes sent and received - Im posting the log of it as Im not sure which field it is.

The error Im receiving is - Error number: 0x80072EFD

Heres the log:
192.168.0.32, XXXXX, iexplore.exe:3:5.1, N, 9/11/2004, 14:39:02, fwsrv, ISA, -, www.microsoft.com, 207.46.249.252, 0, -, 0, 0, -, -, GHBN, -, -, -, 0, 0, XXX Rule, Allow rule, 8, 0
192.168.0.32, XXXXX, iexplore.exe:3:5.1, N, 9/11/2004, 14:39:02, fwsrv, ISA, -, -, 207.46.249.252, 80, -, 0, 0, 80, TCP, Connect, -, -, -, 0, 0, XXX Rule, Allow rule, 8, 149
192.168.0.32, XXXXX, iexplore.exe:3:5.1, N, 9/11/2004, 14:39:02, fwsrv, ISA, -, -, 207.46.249.252, 80, -, 0, 0, 80, TCP, Connect, -, -, -, 0, 0, XXX Rule, Allow rule, 8, 149
192.168.0.32, XXXXX, iexplore.exe:3:5.1, N, 9/11/2004, 14:39:03, fwsrv, ISA, -, windowsupdate.microsoft.com, 207.46.134.92, 0, 1312, 0, 0, -, -, GHBN, -, -, -, 0, 0, XXX Rule, Allow rule, 8, 0
192.168.0.32, XXXXX, iexplore.exe:3:5.1, N, 9/11/2004, 14:39:03, fwsrv, ISA, -, windowsupdate.microsoft.com, 207.46.134.92, 0, -, 0, 0, -, -, GHBN, -, -, -, 0, 0, XXX Rule, Allow rule, 8, 0
192.168.0.32, XXXXX, iexplore.exe:3:5.1, N, 9/11/2004, 14:39:03, fwsrv, ISA, -, -, 207.46.134.92, 80, -, 0, 0, 80, TCP, Connect, -, -, -, 0, 0, XXX Rule, Allow rule, 8, 150
192.168.0.32, XXXXX, iexplore.exe:3:5.1, N, 9/11/2004, 14:39:03, fwsrv, ISA, -, -, 207.46.134.92, 80, -, 0, 0, 80, TCP, Connect, -, -, -, 0, 0, XXX Rule, Allow rule, 8, 150
192.168.0.32, XXXXX, iexplore.exe:3:5.1, N, 9/11/2004, 14:39:03, fwsrv, ISA, -, windowsupdate.microsoft.com, 207.46.134.92, 0, -, 0, 0, -, -, GHBN, -, -, -, 0, 0, XXX Rule, Allow rule, 8, 0
192.168.0.32, XXXXX, iexplore.exe:3:5.1, N, 9/11/2004, 14:39:03, fwsrv, ISA, -, -, 207.46.134.92, 80, -, 0, 0, 80, TCP, Connect, -, -, -, 0, 0, XXX Rule, Allow rule, 8, 151
192.168.0.32, XXXXX, iexplore.exe:3:5.1, N, 9/11/2004, 14:39:03, fwsrv, ISA, -, -, 207.46.134.92, 80, -, 0, 0, 80, TCP, Connect, -, -, -, 0, 0, XXX Rule, Allow rule, 8, 151
192.168.0.32, XXXXX, iexplore.exe:3:5.1, N, 9/11/2004, 14:39:04, fwsrv, ISA, -, v5.windowsupdate.microsoft.com, 207.46.253.124, 0, 391, 0, 0, -, -, GHBN, -, -, -, 0, 0, XXX Rule, Allow rule, 8, 0
192.168.0.32, XXXXX, iexplore.exe:3:5.1, N, 9/11/2004, 14:39:04, fwsrv, ISA, -, v5.windowsupdate.microsoft.com, 207.46.253.124, 0, -, 0, 0, -, -, GHBN, -, -, -, 0, 0, XXX Rule, Allow rule, 8, 0
192.168.0.32, XXXXX, iexplore.exe:3:5.1, N, 9/11/2004, 14:39:04, fwsrv, ISA, -, -, 207.46.253.124, 80, -, 0, 0, 80, TCP, Connect, -, -, -, 0, 0, XXX Rule, Allow rule, 8, 152
192.168.0.32, XXXXX, iexplore.exe:3:5.1, N, 9/11/2004, 14:39:04, fwsrv, ISA, -, -, 207.46.253.124, 80, -, 0, 0, 80, TCP, Connect, -, -, -, 0, 0, XXX Rule, Allow rule, 8, 152
192.168.0.32, XXXXX, iexplore.exe:3:5.1, N, 9/11/2004, 14:39:05, fwsrv, ISA, -, v5.windowsupdate.microsoft.com, 207.46.253.124, 0, -, 0, 0, -, -, GHBN, -, -, -, 0, 0, XXX Rule, Allow rule, 8, 0
192.168.0.32, XXXXX, iexplore.exe:3:5.1, N, 9/11/2004, 14:39:05, fwsrv, ISA, -, -, 207.46.253.124, 80, -, 0, 0, 80, TCP, Connect, -, -, -, 0, 0, XXX Rule, Allow rule, 8, 153
192.168.0.32, XXXXX, iexplore.exe:3:5.1, N, 9/11/2004, 14:39:05, fwsrv, ISA, -, -, 207.46.253.124, 80, -, 0, 0, 80, TCP, Connect, -, -, -, 0, 0, XXX Rule, Allow rule, 8, 153
192.168.0.32, XXXXX, iexplore.exe:3:5.1, N, 9/11/2004, 14:39:07, fwsrv, ISA, -, v5.windowsupdate.microsoft.com, 207.46.253.124, 0, -, 0, 0, -, -, GHBN, -, -, -, 0, 0, XXX Rule, Allow rule, 8, 0
192.168.0.32, XXXXX, iexplore.exe:3:5.1, N, 9/11/2004, 14:39:07, fwsrv, ISA, -, -, 207.46.253.124, 80, -, 0, 0, 80, TCP, Connect, -, -, -, 0, 0, XXX Rule, Allow rule, 8, 154
192.168.0.32, XXXXX, iexplore.exe:3:5.1, N, 9/11/2004, 14:39:07, fwsrv, ISA, -, -, 207.46.253.124, 80, -, 0, 0, 80, TCP, Connect, -, -, -, 0, 0, XXX Rule, Allow rule, 8, 154
192.168.0.32, XXXXX, iexplore.exe:3:5.1, N, 9/11/2004, 14:39:07, fwsrv, ISA, -, v5.windowsupdate.microsoft.com, 207.46.253.124, 0, -, 0, 0, -, -, GHBN, -, -, -, 0, 0, XXX Rule, Allow rule, 8, 0
192.168.0.32, XXXXX, iexplore.exe:3:5.1, N, 9/11/2004, 14:39:07, fwsrv, ISA, -, -, 207.46.253.124, 80, -, 0, 0, 80, TCP, Connect, -, -, -, 0, 0, XXX Rule, Allow rule, 8, 155
192.168.0.32, XXXXX, iexplore.exe:3:5.1, N, 9/11/2004, 14:39:07, fwsrv, ISA, -, -, 207.46.253.124, 80, -, 0, 0, 80, TCP, Connect, -, -, -, 0, 0, XXX Rule, Allow rule, 8, 155
192.168.0.32, XXXXX, iexplore.exe:3:5.1, N, 9/11/2004, 14:39:07, fwsrv, ISA, -, v5.windowsupdate.microsoft.com, 207.46.253.124, 0, -, 0, 0, -, -, GHBN, -, -, -, 0, 0, XXX Rule, Allow rule, 8, 0
192.168.0.32, XXXXX, iexplore.exe:3:5.1, N, 9/11/2004, 14:39:07, fwsrv, ISA, -, -, 207.46.253.124, 80, -, 0, 0, 80, TCP, Connect, -, -, -, 0, 0, XXX Rule, Allow rule, 8, 156
192.168.0.32, XXXXX, iexplore.exe:3:5.1, N, 9/11/2004, 14:39:07, fwsrv, ISA, -, -, 207.46.253.124, 80, -, 0, 0, 80, TCP, Connect, -, -, -, 0, 0, XXX Rule, Allow rule, 8, 156
192.168.0.32, XXXXX, iexplore.exe:3:5.1, N, 9/11/2004, 14:39:08, fwsrv, ISA, -, download.windowsupdate.com, 12.129.72.241, 0, 281, 0, 0, -, -, GHBN, -, -, -, 0, 0, XXX Rule, Allow rule, 8, 0
192.168.0.32, XXXXX, iexplore.exe:3:5.1, N, 9/11/2004, 14:39:08, fwsrv, ISA, -, download.windowsupdate.com, 12.129.72.241, 0, -, 0, 0, -, -, GHBN, -, -, -, 0, 0, XXX Rule, Allow rule, 8, 0
192.168.0.32, XXXXX, iexplore.exe:3:5.1, N, 9/11/2004, 14:39:08, fwsrv, ISA, -, -, 12.129.72.241, 80, -, 0, 0, 80, TCP, Connect, -, -, -, 0, 0, XXX Rule, Allow rule, 8, 157
192.168.0.32, XXXXX, iexplore.exe:3:5.1, N, 9/11/2004, 14:39:08, fwsrv, ISA, -, -, 12.129.72.241, 80, -, 0, 0, 80, TCP, Connect, -, -, -, 0, 0, XXX Rule, Allow rule, 8, 157
192.168.0.32, XXXXX, iexplore.exe:3:5.1, N, 9/11/2004, 14:39:08, fwsrv, ISA, -, download.windowsupdate.com, 12.129.72.241, 0, -, 0, 0, -, -, GHBN, -, -, -, 0, 0, XXX Rule, Allow rule, 8, 0
192.168.0.32, XXXXX, iexplore.exe:3:5.1, N, 9/11/2004, 14:39:08, fwsrv, ISA, -, -, 12.129.72.241, 80, -, 0, 0, 80, TCP, Connect, -, -, -, 0, 0, XXX Rule, Allow rule, 8, 158
192.168.0.32, XXXXX, iexplore.exe:3:5.1, N, 9/11/2004, 14:39:08, fwsrv, ISA, -, -, 12.129.72.241, 80, -, 0, 0, 80, TCP, Connect, -, -, -, 0, 0, XXX Rule, Allow rule, 8, 158
192.168.0.32, XXXXX, iexplore.exe:3:5.1, N, 9/11/2004, 14:39:09, fwsrv, ISA, -, v5.windowsupdate.microsoft.com, 207.46.253.124, 0, -, 0, 0, -, -, GHBN, -, -, -, 0, 0, XXX Rule, Allow rule, 8, 0
192.168.0.32, XXXXX, iexplore.exe:3:5.1, N, 9/11/2004, 14:39:09, fwsrv, ISA, -, -, 207.46.253.124, 80, -, 0, 0, 80, TCP, Connect, -, -, -, 0, 0, XXX Rule, Allow rule, 8, 159
192.168.0.32, XXXXX, iexplore.exe:3:5.1, N, 9/11/2004, 14:39:09, fwsrv, ISA, -, -, 207.46.253.124, 80, 15, 0, 0, 80, TCP, Connect, -, -, -, 0, 0, XXX Rule, Allow rule, 8, 159
192.168.0.32, XXXXX, iexplore.exe:3:5.1, N, 9/11/2004, 14:39:09, fwsrv, ISA, -, v5.windowsupdate.microsoft.com, 207.46.253.124, 0, -, 0, 0, -, -, GHBN, -, -, -, 0, 0, XXX Rule, Allow rule, 8, 0
192.168.0.32, XXXXX, iexplore.exe:3:5.1, N, 9/11/2004, 14:39:09, fwsrv, ISA, -, -, 207.46.253.124, 80, -, 0, 0, 80, TCP, Connect, -, -, -, 0, 0, XXX Rule, Allow rule, 8, 160
192.168.0.32, XXXXX, iexplore.exe:3:5.1, N, 9/11/2004, 14:39:09, fwsrv, ISA, -, -, 207.46.253.124, 80, -, 0, 0, 80, TCP, Connect, -, -, -, 0, 0, XXX Rule, Allow rule, 8, 160
192.168.0.32, XXXXX, iexplore.exe:3:5.1, N, 9/11/2004, 14:39:10, fwsrv, ISA, -, c.microsoft.com, 207.46.157.156, 0, 250, 0, 0, -, -, GHBN, -, -, -, 0, 0, XXX Rule, Allow rule, 8, 0
192.168.0.32, XXXXX, iexplore.exe:3:5.1, N, 9/11/2004, 14:39:10, fwsrv, ISA, -, c.microsoft.com, 207.46.157.156, 0, -, 0, 0, -, -, GHBN, -, -, -, 0, 0, XXX Rule, Allow rule, 8, 0
192.168.0.32, XXXXX, iexplore.exe:3:5.1, N, 9/11/2004, 14:39:10, fwsrv, ISA, -, -, 207.46.157.156, 80, -, 0, 0, 80, TCP, Connect, -, -, -, 0, 0, XXX Rule, Allow rule, 8, 161
192.168.0.32, XXXXX, iexplore.exe:3:5.1, N, 9/11/2004, 14:39:10, fwsrv, ISA, -, -, 207.46.157.156, 80, -, 0, 0, 80, TCP, Connect, -, -, -, 0, 0, XXX Rule, Allow rule, 8, 161
192.168.0.32, XXXXX, iexplore.exe:3:5.1, N, 9/11/2004, 14:39:11, fwsrv, ISA, -, v5.windowsupdate.microsoft.com, 207.46.253.124, 0, -, 0, 0, -, -, GHBN, -, -, -, 0, 0, XXX Rule, Allow rule, 8, 0
192.168.0.32, XXXXX, iexplore.exe:3:5.1, N, 9/11/2004, 14:39:11, fwsrv, ISA, -, -, 207.46.253.124, 80, -, 0, 0, 80, TCP, Connect, -, -, -, 0, 0, XXX Rule, Allow rule, 8, 162
192.168.0.32, XXXXX, iexplore.exe:3:5.1, N, 9/11/2004, 14:39:11, fwsrv, ISA, -, -, 207.46.253.124, 80, -, 0, 0, 80, TCP, Connect, -, -, -, 0, 0, XXX Rule, Allow rule, 8, 162
192.168.0.32, XXXXX, iexplore.exe:3:5.1, N, 9/11/2004, 14:39:11, fwsrv, ISA, -, c.microsoft.com, 207.46.157.156, 0, 1203, 0, 0, -, -, GHBN, -, -, -, 0, 0, XXX Rule, Allow rule, 8, 0
192.168.0.32, XXXXX, iexplore.exe:3:5.1, N, 9/11/2004, 14:39:11, fwsrv, ISA, -, -, 207.46.157.156, 80, -, 0, 0, 80, TCP, Connect, -, -, -, 0, 0, XXX Rule, Allow rule, 8, 163
192.168.0.32, XXXXX, iexplore.exe:3:5.1, N, 9/11/2004, 14:39:11, fwsrv, ISA, -, -, 207.46.157.156, 80, -, 0, 0, 80, TCP, Connect, -, -, -, 0, 0, XXX Rule, Allow rule, 8, 163
192.168.0.32, XXXXX, iexplore.exe:3:5.1, N, 9/11/2004, 14:39:12, fwsrv, ISA, -, c.microsoft.com, 207.46.157.156, 0, -, 0, 0, -, -, GHBN, -, -, -, 0, 0, XXX Rule, Allow rule, 8, 0
192.168.0.32, XXXXX, iexplore.exe:3:5.1, N, 9/11/2004, 14:39:12, fwsrv, ISA, -, -, 207.46.157.156, 80, -, 0, 0, 80, TCP, Connect, -, -, -, 0, 0, XXX Rule, Allow rule, 8, 164
192.168.0.32, XXXXX, iexplore.exe:3:5.1, N, 9/11/2004, 14:39:12, fwsrv, ISA, -, -, 207.46.157.156, 80, -, 0, 0, 80, TCP, Connect, -, -, -, 0, 0, XXX Rule, Allow rule, 8, 164
192.168.0.32, XXXXX, iexplore.exe:3:5.1, N, 9/11/2004, 14:39:35, fwsrv, ISA, -, v5stats.windowsupdate.microsoft.com, 207.46.157.124, 0, 172, 0, 0, -, -, GHBN, -, -, -, 0, 0, XXX Rule, Allow rule, 8, 0
192.168.0.32, XXXXX, iexplore.exe:3:5.1, N, 9/11/2004, 14:39:35, fwsrv, ISA, -, v5stats.windowsupdate.microsoft.com, 207.46.157.124, 0, -, 0, 0, -, -, GHBN, -, -, -, 0, 0, XXX Rule, Allow rule, 8, 0
192.168.0.32, XXXXX, iexplore.exe:3:5.1, N, 9/11/2004, 14:39:35, fwsrv, ISA, -, -, 207.46.157.124, 80, -, 0, 0, 80, TCP, Connect, -, -, -, 0, 0, XXX Rule, Allow rule, 8, 167
192.168.0.32, XXXXX, iexplore.exe:3:5.1, N, 9/11/2004, 14:39:35, fwsrv, ISA, -, -, 207.46.157.124, 80, -, 0, 0, 80, TCP, Connect, -, -, -, 0, 0, XXX Rule, Allow rule, 8, 167
192.168.0.32, XXXXX, iexplore.exe:3:5.1, N, 9/11/2004, 14:39:36, fwsrv, ISA, -, c.microsoft.com, 207.46.157.156, 0, -, 0, 0, -, -, GHBN, -, -, -, 0, 0, XXX Rule, Allow rule, 8, 0
192.168.0.32, XXXXX, iexplore.exe:3:5.1, N, 9/11/2004, 14:39:36, fwsrv, ISA, -, -, 207.46.157.156, 80, -, 0, 0, 80, TCP, Connect, -, -, -, 0, 0, XXX Rule, Allow rule, 8, 168
192.168.0.32, XXXXX, iexplore.exe:3:5.1, N, 9/11/2004, 14:39:36, fwsrv, ISA, -, -, 207.46.157.156, 80, -, 0, 0, 80, TCP, Connect, -, -, -, 0, 0, XXX Rule, Allow rule, 8, 168
192.168.0.32, XXXXX, iexplore.exe:3:5.1, N, 9/11/2004, 14:40:02, fwsrv, ISA, -, -, 207.46.253.124, 80, 54531, 762, 7455, 80, TCP, Connect, -, -, -, 20000, 0, XXX Rule, Allow rule, 8, 154
192.168.0.32, XXXXX, iexplore.exe:3:5.1, N, 9/11/2004, 14:40:02, fwsrv, ISA, -, -, 207.46.253.124, 80, 52906, 287, 289, 80, TCP, Connect, -, -, -, 20000, 0, XXX Rule, Allow rule, 8, 159
192.168.0.32, XXXXX, iexplore.exe:3:5.1, N, 9/11/2004, 14:40:02, fwsrv, ISA, -, -, 207.46.157.156, 80, 51391, 0, 0, 80, TCP, Connect, -, -, -, 20000, 0, XXX Rule, Allow rule, 8, 161
192.168.0.32, XXXXX, iexplore.exe:3:5.1, N, 9/11/2004, 14:40:02, fwsrv, ISA, -, -, 207.46.249.252, 80, 59969, 432, 508, 80, TCP, Connect, -, -, -, 20000, 0, XXX Rule, Allow rule, 8, 149
192.168.0.32, XXXXX, iexplore.exe:3:5.1, N, 9/11/2004, 14:40:02, fwsrv, ISA, -, -, 207.46.134.92, 80, 58453, 471, 2920, 80, TCP, Connect, -, -, -, 20000, 0, XXX Rule, Allow rule, 8, 150
192.168.0.32, XXXXX, iexplore.exe:3:5.1, N, 9/11/2004, 14:40:02, fwsrv, ISA, -, -, 207.46.134.92, 80, 58235, 397, 2920, 80, TCP, Connect, -, -, -, 20000, 0, XXX Rule, Allow rule, 8, 151
192.168.0.32, XXXXX, iexplore.exe:3:5.1, N, 9/11/2004, 14:40:02, fwsrv, ISA, -, -, 207.46.253.124, 80, 57625, 5043, 108875, 80, TCP, Connect, -, -, -, 20000, 0, XXX Rule, Allow rule, 8, 152
192.168.0.32, XXXXX, iexplore.exe:3:5.1, N, 9/11/2004, 14:40:02, fwsrv, ISA, -, -, 207.46.253.124, 80, 54422, 448, 2365, 80, TCP, Connect, -, -, -, 20000, 0, XXX Rule, Allow rule, 8, 155
192.168.0.32, XXXXX, iexplore.exe:3:5.1, N, 9/11/2004, 14:40:02, fwsrv, ISA, -, -, 207.46.253.124, 80, 54235, 462, 2920, 80, TCP, Connect, -, -, -, 20000, 0, XXX Rule, Allow rule, 8, 156
192.168.0.32, XXXXX, iexplore.exe:3:5.1, N, 9/11/2004, 14:40:02, fwsrv, ISA, -, -, 12.129.72.241, 80, 53422, 212, 407, 80, TCP, Connect, -, -, -, 20000, 0, XXX Rule, Allow rule, 8, 157
192.168.0.32, XXXXX, iexplore.exe:3:5.1, N, 9/11/2004, 14:40:02, fwsrv, ISA, -, -, 207.46.253.124, 80, 52735, 2862, 56096, 80, TCP, Connect, -, -, -, 20000, 0, XXX Rule, Allow rule, 8, 160
192.168.0.32, XXXXX, iexplore.exe:3:5.1, N, 9/11/2004, 14:40:02, fwsrv, ISA, -, -, 207.46.253.124, 80, 50688, 1277, 18512, 80, TCP, Connect, -, -, -, 20000, 0, XXX Rule, Allow rule, 8, 162
192.168.0.32, XXXXX, iexplore.exe:3:5.1, N, 9/11/2004, 14:40:02, fwsrv, ISA, -, -, 207.46.157.156, 80, 49844, 637, 383, 80, TCP, Connect, -, -, -, 20000, 0, XXX Rule, Allow rule, 8, 164
192.168.0.32, XXXXX, iexplore.exe:3:5.1, N, 9/11/2004, 14:40:02, fwsrv, ISA, -, -, 207.46.157.124, 80, 26797, 726, 312, 80, TCP, Connect, -, -, -, 20000, 0, XXX Rule, Allow rule, 8, 167
192.168.0.32, XXXXX, iexplore.exe:3:5.1, N, 9/11/2004, 14:40:02, fwsrv, ISA, -, -, 207.46.157.156, 80, 25953, 639, 383, 80, TCP, Connect, -, -, -, 20000, 0, XXX Rule, Allow rule, 8, 168
192.168.0.32, XXXXX, iexplore.exe:3:5.1, N, 9/11/2004, 14:40:02, fwsrv, ISA, -, -, 207.46.253.124, 80, 57047, 3434, 57101, 80, TCP, Connect, -, -, -, 20000, 0, XXX Rule, Allow rule, 8, 153
192.168.0.32, XXXXX, iexplore.exe:3:5.1, N, 9/11/2004, 14:40:02, fwsrv, ISA, -, -, 12.129.72.241, 80, 53297, 174, 7608, 80, TCP, Connect, -, -, -, 20000, 0, XXX Rule, Allow rule, 8, 158
192.168.0.32, XXXXX, iexplore.exe:3:5.1, N, 9/11/2004, 14:40:02, fwsrv, ISA, -, -, 207.46.157.156, 80, 50453, 524, 383, 80, TCP, Connect, -, -, -, 20000, 0, XXX Rule, Allow rule, 8, 163

Thanks again,
Jason

(in reply to bayowin)
Post #: 18
RE: XP SP2 and Windows Update - 13.Sep.2004 8:52:00 PM   
spouseele

 

Posts: 12830
Joined: 1.Jun.2001
From: Belgium
Status: offline
Hi Jason,

nothing unusual in there. Are you sure that nothing was going through the Web Proxy service? If I remember well, I seem to missing some communication from the c-agent 'Microsoft WU Client/2.0' or 'Windows Update Control'.

HTH,
Stefaan

(in reply to bayowin)
Post #: 19
RE: XP SP2 and Windows Update - 13.Sep.2004 9:22:00 PM   
Jason

 

Posts: 49
Joined: 7.May2001
From: US
Status: offline
Hi Stefaan,

I didnt think so either when I looked at the logs but Im not that well versed in it. Nothing should of been going thru the web proxy service as after disabling the redirector i rebooted ISA to be positive it took. Then I verified that the proxy info was not set in IE and the firewall client was on - then rebooted that and then tested.

Its possible I missed something out of the logs. I can re-test it tomorrow night and re-post the logs if that will help?

Jason

(in reply to bayowin)
Post #: 20

Page:   [1] 2   next >   >> << Older Topic    Newer Topic >>
All Forums >> [ISA Server 2000 Firewall] >> Firewall Client >> XP SP2 and Windows Update Page: [1] 2   next >   >>
Jump to:

New Messages No New Messages
Hot Topic w/ New Messages Hot Topic w/o New Messages
Locked w/ New Messages Locked w/o New Messages
 Post New Thread
 Reply to Message
 Post New Poll
 Submit Vote
 Delete My Own Post
 Delete My Own Thread
 Rate Posts