Win Updates Fails through proxy/firewall

Since the update to BITS and Win Update, we have an interesting problem:

All of our fixed IP machines can update, but all of our DHCP machines fail
while trying to download the update files.

If we change a DHCP machine to fixed IP, the files download and install
correctly. The only difference between the two address groups is our DHCP
computers are forced through a proxy server/firewall before being granted
access to the internet. Obviously some change in the download protocol was
made that is no longer liked by our firewall. Anybody have a clue what we
need to free-up in the firewall?

Larry Woodworth wrote:
> Since the update to BITS and Win Update, we have an interesting
> problem:
>
> All of our fixed IP machines can update, but all of our DHCP machines
> fail while trying to download the update files.
>
> If we change a DHCP machine to fixed IP, the files download and
> install correctly. The only difference between the two address
> groups is our DHCP computers are forced through a proxy
> server/firewall before being granted access to the internet.
> Obviously some change in the download protocol was made that is no
> longer liked by our firewall. Anybody have a clue what we need to
> free-up in the firewall?

Hi;

As you may have guessed, the probable solution is to add the MS Windows
Update servers to the Exceptions and Trusted Sites lists on those systems.
Here are a couple of MS KB article that deal with this in some depth:

http://support.microsoft.com/default...b;en-us;836941
http://support.microsoft.com/default...b;en-us;888894

There are more KB articles with slightly different scenarios based on the
version of Windows used and the proxy/firewall used. Hopefully the above
will get things pointed in the right direction on your systems.


--

....Sky

Tom "Sky" King
=============