Http proxy Blocking Windows update

[dfrank]

I am new to Watchguard boxes and have recently installed an X1000. I haven opened up most access that users need via the http proxy settings, but I am unable to connect to Windows update. Obviously this is important as MS has at least 1 new vulnerability a week.

Does anyone know what application/service Windows update uses?

Thanks,

DF

 

[dforney]

Hello -

Make sure ports 80 and 443 are open, I believe outbound-only is fine, I'll have to look at mine.

If that doesn't work - add

http://www.windowsupdate.com

to the trusted sites.

 

[PcClone]

Another thing to watch out for is that if you have installed the HTTP proxy, it has an option to not allow ActiveX Controls. WU uses ActiveX and therefore needs that to be allowed. It is usually helpful to open up the system manager and watch the traffic when you go to WU. It should tell you exactly why it was denied.

Bill

 

[pankajchawla]

For Microsoft Update to work properly with a proxied-HTTP or HTTP proxy you will need to complete the following steps

Open httpp service in the policy manager
Click on the Properties Tab then click Settings. On this page uncheck the following:

1) Remove Client Connection Info
2) Remove Unknown Headers
3) and Remove Require Content Type

Now on the Content Type Tab and the content types/MIME types that are needed are:

1) application/octet-stream

2) application/x-javascript

3) application/x-msdownload

4) multipart/byteranges


Let me know if this works.

Pankaj Chawla
WCSP