If some machines are working and some aren't, it mostly likely is not your
PIX. We use a PIX, and have never had any issues with any of our servers or
computers running Windows Update, and we don't have any special ports opened
for that.
Tom
"mcseoc" <> wrote in message
news

5B3CDD2-CE11-4FC6-81E4-...
| Had problems with Windows update, moved the machine to our vendorvlan
which
| is wide open and it went right through. Means the PIX is blocking
something.
| I would get "unable to verify publisher on activeX" then Got error 0X8dddd
or
| something close."
|
| Looking for ports that need to be open? Seems to effect new installs, some
| existing machines still work behind the firewall, some dont. Relates to
new
| version 6 site.