Firewall and Word 2004 Security Updatel

How can I do the recommended security update with my ZA firewall?

I get this error message: "The Office Update site can perform
detection on your computer and tell you exactly which updates you
need! To take advantage of this service, please return to this site
with MSN Explorer or Microsoft Internet Explorer version 5.0 or later
installed. If you are already using Internet Explorer 5.0 or later and
you are using Internet Security, Internet Privacy, or personal
firewall products, the products may be interfering with browser
detection. Please temporarily turn off these products and then try
visiting this site again. For more information about this issue, see
the Microsoft Knowledge Base article 832765."

I do not want to turn off my firewall even for a minutes or two while
Microsoft does its thing checking for the latest update appropriate
for my computer.

Any suggestiong of a setting I can change to allow this update search?
I would rather forgo the security update than risk something attacking
my computer while ZA is disabled.

Thanks, Sandy
--
reply to taking out the obvious

"Sandy M",

There is no need to shut off your firewall, but there may be a need to set up an
exception object for Windows Updates / Microsoft Update / Office Updates.

1. Set the proxy server explicitly for services
a. At the command prompt, type: proxycfg.exe and press the <Enter> key.
b. Verify that the server is not listed as <null> nor the port listed as
<null>
c. Assuming the proxy information does not match what you have listed in
Internet Explorer, please follow the remaining steps.
d. Type the following (assuming you know the proxy server and port you are
using: proxycfg.exe -p (proxy server name)port number)
Example: proxycfg.exe -p MyServerRocks:8080
e. Repeat step 1a, looking to see if the Server name and port match the
entries in Internet Explorer.
f. Once this is correct, open an Internet Explorer window and try again.

The following is an example specific to ISA Server 2000, but please adapt the
instructions to YOUR firewall to build the same settings in your given
situation:

On ISA Server 2000
- Disable global authentication for web proxy requests
1. Open the ISA Management MMC
2. Select View, then Advanced
3. Expand Servers and Arrays
4. Right-Click on the <Array Name>
5. Select Properties
6. Select Outgoing Web Requests
7. Uncheck Ask Unauthenticated users for identification
8. Click Apply,
9. When prompted, select Save the changes and restart the service(s)
10. Click OK

- Create a destination set for Windows Update domains
1. Expand <Array Name> and Policy Elements
2. Right-click Destination Sets
3. Select New, then click Set
4. Enter "Windows Update" in the Name field, and click Next
5. Click Add
6. Enter *.download.microsoft.com in the Domain field
7. Leave the Path field blank
8. Click OK
9. Repeat steps 4 through 7 for the following domains:
*.windowsupdate.com
*.windowsupdate.microsoft.com
download.windowsupdate.com
10. Click OK

- Create an anonymous Site and Content rule for Windows Update requests
1. Expand Access Policy
2. Right-click Site and Content Rules
3. Select New, then Rule
4. Enter "Windows Update" in the Name field, and click Next
5. Select Allow and click Next
6. Select Allow access based on destination, and click Next
7. In the "Apply this rule to:" drop-down list, select Specified Destination
Set
8. In the Name: drop-down list, select Windows Update
9. Click Next, then click Finish

Please reply back to this thread and let us know how this goes!

Sincerely,

Pat Walters [MSFT]

This posting is provided "AS IS" with no warranties, and confers no rights. Use
of included script samples are subject to the terms specified at
http://www.microsoft.com/info/cpyright.htm"

"Sandy M" <> wrote in message
news:...
> How can I do the recommended security update with my ZA firewall?
>
> I get this error message: "The Office Update site can perform
> detection on your computer and tell you exactly which updates you
> need! To take advantage of this service, please return to this site
> with MSN Explorer or Microsoft Internet Explorer version 5.0 or later
> installed. If you are already using Internet Explorer 5.0 or later and
> you are using Internet Security, Internet Privacy, or personal
> firewall products, the products may be interfering with browser
> detection. Please temporarily turn off these products and then try
> visiting this site again. For more information about this issue, see
> the Microsoft Knowledge Base article 832765."
>
> I do not want to turn off my firewall even for a minutes or two while
> Microsoft does its thing checking for the latest update appropriate
> for my computer.
>
> Any suggestiong of a setting I can change to allow this update search?
> I would rather forgo the security update than risk something attacking
> my computer while ZA is disabled.
>
> Thanks, Sandy
> --
> reply to taking out the obvious

Thank you for trying to help but I do not understand most of your
instructions. I got as far as proxycfg.exe and the answer I got was:
WinHttpSetings: Direct access <no proxy server>.

I don't know what a proxy server name is or if I have one and don't
know how to use the advanced settings relating to port numbers with
Zone Alarm. I think I will post my problem on the Zone Alarm forum and
maybe someone there can help me with changing those settings rather
that what you suggested.

In general though, I am bugged with Microsoft for not making this
easier. Why would they even suggest turning off my firewall? I have no
trouble with the WindowsXP updates so why does this have to be so much
harder?

Thanks again,
Sandy
On Thu, 28 Apr 2005 13:06:43 -0700, "Pat Walters [MSFT]"
<a-> wrote:

>"Sandy M",
>
>There is no need to shut off your firewall, but there may be a need to set up an
>exception object for Windows Updates / Microsoft Update / Office Updates.
>
>1. Set the proxy server explicitly for services
> a. At the command prompt, type: proxycfg.exe and press the <Enter> key.
> b. Verify that the server is not listed as <null> nor the port listed as
><null>
> c. Assuming the proxy information does not match what you have listed in
>Internet Explorer, please follow the remaining steps.
> d. Type the following (assuming you know the proxy server and port you are
>using: proxycfg.exe -p (proxy server name)port number)
> Example: proxycfg.exe -p MyServerRocks:8080
> e. Repeat step 1a, looking to see if the Server name and port match the
>entries in Internet Explorer.
> f. Once this is correct, open an Internet Explorer window and try again.
>
>The following is an example specific to ISA Server 2000, but please adapt the
>instructions to YOUR firewall to build the same settings in your given
>situation:
>
>On ISA Server 2000
>- Disable global authentication for web proxy requests
> 1. Open the ISA Management MMC
> 2. Select View, then Advanced
> 3. Expand Servers and Arrays
> 4. Right-Click on the <Array Name>
> 5. Select Properties
> 6. Select Outgoing Web Requests
> 7. Uncheck Ask Unauthenticated users for identification
> 8. Click Apply,
> 9. When prompted, select Save the changes and restart the service(s)
> 10. Click OK
>
>- Create a destination set for Windows Update domains
> 1. Expand <Array Name> and Policy Elements
> 2. Right-click Destination Sets
> 3. Select New, then click Set
> 4. Enter "Windows Update" in the Name field, and click Next
> 5. Click Add
> 6. Enter *.download.microsoft.com in the Domain field
> 7. Leave the Path field blank
> 8. Click OK
> 9. Repeat steps 4 through 7 for the following domains:
> *.windowsupdate.com
> *.windowsupdate.microsoft.com
> download.windowsupdate.com
>10. Click OK
>
>- Create an anonymous Site and Content rule for Windows Update requests
> 1. Expand Access Policy
> 2. Right-click Site and Content Rules
> 3. Select New, then Rule
> 4. Enter "Windows Update" in the Name field, and click Next
> 5. Select Allow and click Next
> 6. Select Allow access based on destination, and click Next
> 7. In the "Apply this rule to:" drop-down list, select Specified Destination
>Set
> 8. In the Name: drop-down list, select Windows Update
> 9. Click Next, then click Finish
>
>Please reply back to this thread and let us know how this goes!
>
>Sincerely,
>
>Pat Walters [MSFT]
>
>This posting is provided "AS IS" with no warranties, and confers no rights. Use
>of included script samples are subject to the terms specified at
>http://www.microsoft.com/info/cpyright.htm"
>
>"Sandy M" <> wrote in message
>news:.. .
>> How can I do the recommended security update with my ZA firewall?
>>
>> I get this error message: "The Office Update site can perform
>> detection on your computer and tell you exactly which updates you
>> need! To take advantage of this service, please return to this site
>> with MSN Explorer or Microsoft Internet Explorer version 5.0 or later
>> installed. If you are already using Internet Explorer 5.0 or later and
>> you are using Internet Security, Internet Privacy, or personal
>> firewall products, the products may be interfering with browser
>> detection. Please temporarily turn off these products and then try
>> visiting this site again. For more information about this issue, see
>> the Microsoft Knowledge Base article 832765."
>>
>> I do not want to turn off my firewall even for a minutes or two while
>> Microsoft does its thing checking for the latest update appropriate
>> for my computer.
>>
>> Any suggestiong of a setting I can change to allow this update search?
>> I would rather forgo the security update than risk something attacking
>> my computer while ZA is disabled.
>>
>> Thanks, Sandy
>> --
>> reply to taking out the obvious
>

--
reply to taking out the obvious

I finally got the auto update tool to work.

There is a chance I just made a dumb mistake when I tried the first
few times and not paying attention, used Firefox for the update. I
knew I should use MSIE so I opened it up and then opened Word to
"check for updates". I just assumed the connection would be with MSIE
since it was already open. I think Firefox tried for the update and I
just didn't notice. Dumb, dumb!!

I also updated Zone Alarm but think that was not the problem.

Thank you again for taking the time to try to help.
Sandy

On Thu, 28 Apr 2005 13:06:43 -0700, "Pat Walters [MSFT]"
<a-> wrote:

>"Sandy M",
>
>There is no need to shut off your firewall, but there may be a need to set up an
>exception object for Windows Updates / Microsoft Update / Office Updates.
>
>1. Set the proxy server explicitly for services
> a. At the command prompt, type: proxycfg.exe and press the <Enter> key.
> b. Verify that the server is not listed as <null> nor the port listed as
><null>
> c. Assuming the proxy information does not match what you have listed in
>Internet Explorer, please follow the remaining steps.
> d. Type the following (assuming you know the proxy server and port you are
>using: proxycfg.exe -p (proxy server name)port number)
> Example: proxycfg.exe -p MyServerRocks:8080
> e. Repeat step 1a, looking to see if the Server name and port match the
>entries in Internet Explorer.
> f. Once this is correct, open an Internet Explorer window and try again.
>
>The following is an example specific to ISA Server 2000, but please adapt the
>instructions to YOUR firewall to build the same settings in your given
>situation:
>
>On ISA Server 2000
>- Disable global authentication for web proxy requests
> 1. Open the ISA Management MMC
> 2. Select View, then Advanced
> 3. Expand Servers and Arrays
> 4. Right-Click on the <Array Name>
> 5. Select Properties
> 6. Select Outgoing Web Requests
> 7. Uncheck Ask Unauthenticated users for identification
> 8. Click Apply,
> 9. When prompted, select Save the changes and restart the service(s)
> 10. Click OK
>
>- Create a destination set for Windows Update domains
> 1. Expand <Array Name> and Policy Elements
> 2. Right-click Destination Sets
> 3. Select New, then click Set
> 4. Enter "Windows Update" in the Name field, and click Next
> 5. Click Add
> 6. Enter *.download.microsoft.com in the Domain field
> 7. Leave the Path field blank
> 8. Click OK
> 9. Repeat steps 4 through 7 for the following domains:
> *.windowsupdate.com
> *.windowsupdate.microsoft.com
> download.windowsupdate.com
>10. Click OK
>
>- Create an anonymous Site and Content rule for Windows Update requests
> 1. Expand Access Policy
> 2. Right-click Site and Content Rules
> 3. Select New, then Rule
> 4. Enter "Windows Update" in the Name field, and click Next
> 5. Select Allow and click Next
> 6. Select Allow access based on destination, and click Next
> 7. In the "Apply this rule to:" drop-down list, select Specified Destination
>Set
> 8. In the Name: drop-down list, select Windows Update
> 9. Click Next, then click Finish
>
>Please reply back to this thread and let us know how this goes!
>
>Sincerely,
>
>Pat Walters [MSFT]
>
>This posting is provided "AS IS" with no warranties, and confers no rights. Use
>of included script samples are subject to the terms specified at
>http://www.microsoft.com/info/cpyright.htm"
>
>"Sandy M" <> wrote in message
>news:.. .
>> How can I do the recommended security update with my ZA firewall?
>>
>> I get this error message: "The Office Update site can perform
>> detection on your computer and tell you exactly which updates you
>> need! To take advantage of this service, please return to this site
>> with MSN Explorer or Microsoft Internet Explorer version 5.0 or later
>> installed. If you are already using Internet Explorer 5.0 or later and
>> you are using Internet Security, Internet Privacy, or personal
>> firewall products, the products may be interfering with browser
>> detection. Please temporarily turn off these products and then try
>> visiting this site again. For more information about this issue, see
>> the Microsoft Knowledge Base article 832765."
>>
>> I do not want to turn off my firewall even for a minutes or two while
>> Microsoft does its thing checking for the latest update appropriate
>> for my computer.
>>
>> Any suggestiong of a setting I can change to allow this update search?
>> I would rather forgo the security update than risk something attacking
>> my computer while ZA is disabled.
>>
>> Thanks, Sandy
>> --
>> reply to taking out the obvious
>

--
reply to taking out the obvious