Update error 0x80072EE2 - which ports to open ?

I'm having the same problem as most of people here.
According to http://support.microsoft.com/?kbid=836941 I tried all the steps
except "Method 6" (Proxy exceptions list).

In our company must use proxy to gain access to internet, direct connection
is disabled on firewall (Linux-based IpTables) . Only ports for HTTP and
HTTPS are allowed via proxy (Squid) and only connections opend from *inside*
are allowed.

Also "Method 2" (Reconfigure firewall) - won't help, because there (in KB
article) is not list of ports which must be opend for WindowsUpdate v5.

Therefore recommendations to disable personal firewall programs won't work
here (and our IT security administrator got into a flap when I asked him to
disable company's firewall just because of WindowsUpdate) .

So can some MSFT write me which ports, directions (in/out) and protocols
(TCP/UDP) have to be opend to get WinUpdate v5 functional ?

Tomas Vokoun wrote:

> I'm having the same problem as most of people here.
> According to http://support.microsoft.com/?kbid=836941 I tried all the steps
> except "Method 6" (Proxy exceptions list).
>
> In our company must use proxy to gain access to internet, direct connection
> is disabled on firewall (Linux-based IpTables) . Only ports for HTTP and
> HTTPS are allowed via proxy (Squid) and only connections opend from *inside*
> are allowed.
>
> Also "Method 2" (Reconfigure firewall) - won't help, because there (in KB
> article) is not list of ports which must be opend for WindowsUpdate v5.
>
> Therefore recommendations to disable personal firewall programs won't work
> here (and our IT security administrator got into a flap when I asked him to
> disable company's firewall just because of WindowsUpdate) .
>
> So can some MSFT write me which ports, directions (in/out) and protocols
> (TCP/UDP) have to be opend to get WinUpdate v5 functional ?
Hi

WU5 uses TCP port 80 and 443 (you might need UDP as well).

Open TCP/IP port 443 for https://v5.windowsupdate.microsoft.com (to
allow https traffic from the WU site).

More detailed instructions here (Norton firewall example):
http://groups.google.com/groups?selm...1-gui.ntli.net


--
torgeir, Microsoft MVP Scripting and WMI, Porsgrunn Norway
Administration scripting examples and an ONLINE version of
the 1328 page Scripting Guide:
http://www.microsoft.com/technet/scr...r/default.mspx

"Torgeir Bakken (MVP)" wrote:

> Hi
>
> WU5 uses TCP port 80 and 443 (you might need UDP as well).
>
> Open TCP/IP port 443 for https://v5.windowsupdate.microsoft.com (to
> allow https traffic from the WU site).

We have ports 80/tcp and 443/tcp (standard HTTP and HTTPs) opend through
proxy server (as I wrote in my previous post).

But error 0x80072EE2 is still here.

Configure WinHTTP proxy using "proxycfg" command on Windows, else WU is
trying to connect directly which obviously fails behind corporate firewalls.
For some reason it stops using proxy configured in IE for https connection
(as observed in my site).
Use tcpdump, Ethereal or similar to see what's going on nework during update.

"Tomas Vokoun" wrote:

> "Torgeir Bakken (MVP)" wrote:
>
> > Hi
> >
> > WU5 uses TCP port 80 and 443 (you might need UDP as well).
> >
> > Open TCP/IP port 443 for https://v5.windowsupdate.microsoft.com (to
> > allow https traffic from the WU site).
>
> We have ports 80/tcp and 443/tcp (standard HTTP and HTTPs) opend through
> proxy server (as I wrote in my previous post).
>
> But error 0x80072EE2 is still here.