What IP Ports Does Windows Update Need Open?

I have a server that is in our DMZ. It can't get past the first screen of
Windows Update. When I click on the "Keep your computer up to date" Express
or Custom button, I never get to the list of updates. I believe ports may be
blocked at the firewall. Can someone tell me which ones need to be open?
Thanks.

Port 443 must be enabled.
--
Maurice N
MVP Windows - Shell / User
-----

SMFaison wrote:
> I have a server that is in our DMZ. It can't get past the first
> screen of Windows Update. When I click on the "Keep your computer
> up to date" Express or Custom button, I never get to the list of
> updates. I believe ports may be blocked at the firewall. Can
> someone tell me which ones need to be open? Thanks.

I had one of the network guys verify that this port is open. He verified
that www and https are enabled outbound. Is there anything else we can check?

"Maurice N ~ MVP" wrote:

> Port 443 must be enabled.
> --
> Maurice N
> MVP Windows - Shell / User
> -----
>
> SMFaison wrote:
> > I have a server that is in our DMZ. It can't get past the first
> > screen of Windows Update. When I click on the "Keep your computer
> > up to date" Express or Custom button, I never get to the list of
> > updates. I believe ports may be blocked at the firewall. Can
> > someone tell me which ones need to be open? Thanks.
>

"SMFaison" <> wrote in message
news:BCF717A2-F768-4454-9B83-...
>I have a server that is in our DMZ. It can't get past the first screen of
> Windows Update. When I click on the "Keep your computer up to date" Express
> or Custom button, I never get to the list of updates.


Which OS? Alternatively, find out if there are some diagnostics which
you can invoke in your firewall.

One possible explanation for your symptom would be DNS problems.
For example, when I clicked on Custom, FiddlerTools showed
the first request after that is sent to Host: download.windowsupdate.com
and that was the first instance of that server name in the session.

Further, nslookup showed that that name is an alias (one of several) for
Name: download.windowsupdate.com.c.footprint.net


This would not be the best newsgroup to try to troubleshoot that.
You would probably get better assistance from a newsgroup
which specializes in Networking for your OS.

Here is a troubleshooter which can lead you to the XP networking newsgroup
if you need more help

http://www.michna.com/kb/


Good luck

Robert Aldwinckle
---


> I believe ports may be
> blocked at the firewall. Can someone tell me which ones need to be open?
> Thanks.