Firewalls and WSUS

My company is attempting to keep DMZ boxes up to date via an internal WSUS
box running on port 80.

My question: I have to open port 80 coming from the DMZ to the internal
WSUS box (because of the pull nature of WSUS), but is there anything that
will break if port 80 from internal WSUS to DMZ box is blocked?

The Microsoft BITS/WSUS documentation is lacking on this subject (or is
extremely hard to find).

Perhaps try the WSUS Newsgroup

news://msnews.microsoft.com/microsof...pdate_services
(OE client)
or
http://www.microsoft.com/communities...pdate_services
(web client)



"Chris" wrote:

> My company is attempting to keep DMZ boxes up to date via an internal WSUS
> box running on port 80.
>
> My question: I have to open port 80 coming from the DMZ to the internal
> WSUS box (because of the pull nature of WSUS), but is there anything that
> will break if port 80 from internal WSUS to DMZ box is blocked?
>
> The Microsoft BITS/WSUS documentation is lacking on this subject (or is
> extremely hard to find).