Welcome to ISAserver.org
Forums |
Register |
Login |
My Profile |
Inbox |
RSS 
|
My Subscription |
My Forums |
Address Book |
Member List |
Search |
FAQ |
Ticket List |
Log Out
RE: Windows update doesnt work at Win. 2k3?
|
Users viewing this topic:
none
|
Logged in as: Guest
|
Login  | |
|
RE: Windows update doesnt work at Win. 2k3? - 13.Nov.2005 11:33:01 PM
|
|
|
Sunny.C
Posts: 800
Joined: 5.Apr.2005
From: sydney
Status: offline
|
May i just addin that you should manually update your server's, especially if the server is a firewall. I have run
into may problems before with microsoft updates effecting the O/S with auto live updates.
|
|
|
|
|
RE: Windows update doesnt work at Win. 2k3? - 14.Nov.2005 7:51:04 AM
|
|
|
iraq it
Posts: 297
Joined: 1.Jul.2005
From: Iraq
Status: offline
|
quote:
ORIGINAL: Sunny.C
May i just addin that you should manually update your server's, especially if the server is a firewall. I have run
into may problems before with microsoft updates effecting the O/S with auto live updates.
Untill now i couldnt update the ISA firewall even with anonymous windows rule and do it manually.
So you mean there is little risk with MS. updates?
Thanks,
|
|
|
|
|
RE: Windows update doesnt work at Win. 2k3? - 14.Nov.2005 9:21:24 AM
|
|
|
sam_hunter
Posts: 46
Joined: 12.Nov.2005
Status: offline
|
Are there no risks with applying patches? No. Are there no risks with not applying patches? No to that one as well. You have to look at your network. Is the vulnerability in your network such that you need to patch? What apps do you have that have historically had issues with patching? Will your LOB vendors support patching? Does your firm need a patch testing process? When's the best time to patch for your firm?
I normally manually patch servers or at least ensure they are in their own patch schedule. I'd recommend you look at WSUS for a free patch tool for a network.
|
|
|
|
|
RE: Windows update doesnt work at Win. 2k3? - 14.Nov.2005 2:56:24 PM
|
|
|
tshinder
Posts: 47439
Joined: 10.Jan.2001
From: Texas
Status: offline
|
I agree that you should not install patches on any server without testing them first. This is especially true on a firewall, that includes PIX and Check Point server, and ISA firewalls. Never install an untested patch.
HTH,
Tom
_____________________________
Thomas W Shinder, M.D.
Sr. Consultant/Technical Writer
Prowess Consulting http://www.prowessconsulting.com/
Blog: http://blogs.isaserver.org/shinder/
GET THE NEW ISA 2006 Book!: http://tinyurl.com/2gpoo8
|
|
|
|
|
RE: Windows update doesnt work at Win. 2k3? - 14.Nov.2005 4:45:23 PM
|
|
|
iraq it
Posts: 297
Joined: 1.Jul.2005
From: Iraq
Status: offline
|
quote:
ORIGINAL: tshinder
I agree that you should not install patches on any server without testing them first. This is especially true on a firewall, that includes PIX and Check Point server, and ISA firewalls. Never install an untested patch.
HTH,
Tom
Well, i have anonymouse windows update rule to most producation servers but how can i test the update before install it, any idea ?
Also, I couldnt untill now able to update the ISA firewall even i do it manually and i have the rule that allow local host, any idea?
Thanks,
|
|
|
|
|
RE: Windows update doesnt work at Win. 2k3? - 15.Nov.2005 1:22:16 PM
|
|
|
Sunny.C
Posts: 800
Joined: 5.Apr.2005
From: sydney
Status: offline
|
Do you mean you can update all servers but not the isa server???
The way i test patches before putting them on live is in a test lab with the exact same network layout.
|
|
|
|
|
RE: Windows update doesnt work at Win. 2k3? - 15.Nov.2005 2:19:22 PM
|
|
|
iraq it
Posts: 297
Joined: 1.Jul.2005
From: Iraq
Status: offline
|
quote:
ORIGINAL: Sunny.C
Do you mean you can update all servers but not the isa server???
The way i test patches before putting them on live is in a test lab with the exact same network layout.
Yes, except the ISA firewall.
And how do you know its bad batches? Are Microsoft producing harm patches?
Thanks,
|
|
|
|
|
RE: Windows update doesnt work at Win. 2k3? - 16.Nov.2005 1:38:26 PM
|
|
|
Sunny.C
Posts: 800
Joined: 5.Apr.2005
From: sydney
Status: offline
|
Have your added the *.windowsupdate.microsoft.com into your rule????
Microsoft patches can sometimes effect O/S from working properly and do more harm then good, thats why we need to test before
we use it live.
|
|
|
|
|
RE: Windows update doesnt work at Win. 2k3? - 18.Nov.2005 12:10:34 AM
|
|
|
Sunny.C
Posts: 800
Joined: 5.Apr.2005
From: sydney
Status: offline
|
Just create a server's address range for the server's you want the rule to apply to or computer sets.(Exclude any
server which you don't want the rule to apply to.)
|
|
|
|
|
RE: Windows update doesnt work at Win. 2k3? - 18.Nov.2005 2:58:44 PM
|
|
|
iraq it
Posts: 297
Joined: 1.Jul.2005
From: Iraq
Status: offline
|
quote:
ORIGINAL: Sunny.C
Just create a server's address range for the server's you want the rule to apply to or computer sets.(Exclude any
server which you don't want the rule to apply to.)
So i will exclude some key servers and leave the test server so i cant test the update even i dont understand how can i know its harm patch!
Thanks,
|
|
|
|
|
RE: Windows update doesnt work at Win. 2k3? - 20.Nov.2005 2:16:29 AM
|
|
|
Sunny.C
Posts: 800
Joined: 5.Apr.2005
From: sydney
Status: offline
|
If that is the way you like to do it then yes....
The best way to test is have a identical server in a test lab.
|
|
|
|
|
RE: Windows update doesnt work at Win. 2k3? - 23.Nov.2005 11:00:44 AM
|
|
|
brian4answers
Posts: 15
Joined: 14.Jul.2005
From: Cork
Status: offline
|
In internet connections on the Servers, try the following:-
Tick Use a Proxy Server quoting IP Address of ISA Server, and Port 8080
Brian
|
|
|
|
|
RE: Windows update doesnt work at Win. 2k3? - 23.Nov.2005 4:39:18 PM
|
|
|
LLigetfa
Posts: 2184
Joined: 10.Aug.2004
From: fort frances.on.ca
Status: offline
|
While WinHTTP can glean proxy settings from your browser, I prefer to set it with the proxycfg CL utility.
_____________________________
The School of Hard Knocks is a mean teacher. She gives the exam before the lesson.
|
|
|
|
|
RE: Windows update doesnt work at Win. 2k3? - 24.Nov.2005 7:50:55 AM
|
|
|
iraq it
Posts: 297
Joined: 1.Jul.2005
From: Iraq
Status: offline
|
quote:
ORIGINAL: brian4answers
In internet connections on the Servers, try the following:-
Tick Use a Proxy Server quoting IP Address of ISA Server, and Port 8080
Brian
What will result by applying this?
Thank,
|
|
|
|
|
RE: Windows update doesnt work at Win. 2k3? - 27.Nov.2005 10:02:26 AM
|
|
|
Sunny.C
Posts: 800
Joined: 5.Apr.2005
From: sydney
Status: offline
|
If you tick that option your server will be using the proxy server for it's internet requests, I recommend using proxy for all your servers.
|
|
|
|
|
RE: Windows update doesnt work at Win. 2k3? - 27.Nov.2005 3:03:39 PM
|
|
|
iraq it
Posts: 297
Joined: 1.Jul.2005
From: Iraq
Status: offline
|
quote:
ORIGINAL: Sunny.C
If you tick that option your server will be using the proxy server for it's internet requests, I recommend using proxy for all your servers.
OK, thanks.
|
|
|
|
|
RE: Windows update doesnt work at Win. 2k3? - 27.Nov.2005 3:09:14 PM
|
|
|
LLigetfa
Posts: 2184
Joined: 10.Aug.2004
From: fort frances.on.ca
Status: offline
|
quote:
If you tick that option your server will be using the proxy server
Setting proxy that way is a "per user" setting but Windows Update uses WinHTTP which runs under localsystem. As I already said, WinHTTP can *glean* the proxy settings from the user, but why leave it to chance? Use the PROXYCFG CL utility instead.
_____________________________
The School of Hard Knocks is a mean teacher. She gives the exam before the lesson.
|
|
|
|
 New Messages |
 No New Messages |
 Hot Topic w/ New Messages |
 Hot Topic w/o New Messages |
 Locked w/ New Messages |
 Locked w/o New Messages |
|
 Post New Thread
Reply to Message
Post New Poll
Submit Vote
Delete My Own Post
Delete My Own Thread
Rate Posts |
|
Printable Version
And if i have to avoid some servers and i have anonymous windows update rule so how exclude some of the servers? 