Firewall blocking windows update

I have my firewall set to block activex and java scripting. Unfortunately
doing this has resulted in me not being able to use windows update. I've
added the list of sites to the filter that were mentioned in the KB article
but still get errors when trying to use windows update. I can't keep opening
the firewall every time I need to update. Anyone know any solutions?

Thanks.

Which firewall?

"Nate Weldon" <> wrote in message
news:1A368B1A-F8CE-4B71-ABFE-...
>I have my firewall set to block activex and java scripting. Unfortunately
> doing this has resulted in me not being able to use windows update. I've
> added the list of sites to the filter that were mentioned in the KB
> article
> but still get errors when trying to use windows update. I can't keep
> opening
> the firewall every time I need to update. Anyone know any solutions?
>
> Thanks.

not the windows firewall, I disabled that. The network gateway firewall, it
is a sonicwall.

"Jerry" wrote:

> Which firewall?
>
> "Nate Weldon" <> wrote in message
> news:1A368B1A-F8CE-4B71-ABFE-...
> >I have my firewall set to block activex and java scripting. Unfortunately
> > doing this has resulted in me not being able to use windows update. I've
> > added the list of sites to the filter that were mentioned in the KB
> > article
> > but still get errors when trying to use windows update. I can't keep
> > opening
> > the firewall every time I need to update. Anyone know any solutions?
> >
> > Thanks.
>
>
>

"Nate Weldon",

There are two things going on here. Without knowing more about the
sonicwall proxy, let me just say that the following seems to be true:
1. You have allowed the three required download sites:
a. http://*.windowsupdate.microsoft.com
b. https://*.windowsupdate.microsoft.com
c. http://download.windowsupdate.com
2. You have denied the use of ActiveX and java scripting.

Windows Update uses ActiveX controls as part of its infrastructure.
Therefore, is it at all possible that your ALLOW list is blocked by the
denial of ActiveX controls? Here would be the easy test.

1. On your firewall, temporarily remove the restriction on ActiveX and
javascript (maybe when everyone goes home).
2. Try out Windows Update and see if it works. If so,
3. Take another look at the sonicwall proxy (Windows Firewall does not stop
client side requests, so Windows Update works just fine with Windows
Firewall)
4. Specifically, are there exception lists for things like banned software,
such as ActiveX?
5. If there is a general exception list, create one of those as well for the
same three sites mentioned above.

Let us know how this turns out.

Sincerely,

Pat Walters [MSFT]

"Nate Weldon" <> wrote in message
news:1A368B1A-F8CE-4B71-ABFE-...
> I have my firewall set to block activex and java scripting. Unfortunately
> doing this has resulted in me not being able to use windows update. I've
> added the list of sites to the filter that were mentioned in the KB
article
> but still get errors when trying to use windows update. I can't keep
opening
> the firewall every time I need to update. Anyone know any solutions?
>
> Thanks.