Endian Firewall and Windows Updates

[Craig_W]

We are currently using an Endian Firewall Box running version 2.1.2 with our laptops. The laptops can surf the web ok, but the windows updates website will not connect. We are not using any authentication on Endian.

 

Any ideas?

[Geoff]

Do you use a proxy server?

[Craig_W]

Sorry, I should of said that - yes we are using it as a web proxy.

[Geoff]

Have you informed the WinHTTP/BITS service on the machines of this using the 'proxycfg' command line tool?

[Craig_W]

Could you clarify further what you mean please? I've not had this box set up long and still learning!

[Geoff]

The Windows update service does not use the IE proxy settings when it wants to download things. Instead it asks the WinHTTP/BITS service to do it for it. You therefore must tell WinHTTP/BITS where your proxy is. You can do this (in a startup script for example) with the command line tool 'proxycfg' (exists on WinXP SP2 and above).

 

For example, import IE settings:

proxycfg -u

Use a proxy

proxycfg -p proxy.yourdomain.whereever.sch.uk:8080

Use a proxy and a WSUS server

proxycfg -p proxy.yourdomain.whereever.sch.uk:8080 WSUSServer.proxy.yourdomain.whereever.sch.uk

If you leave it in it's default unconfigured state, it'll attempt to connect directly to the microsoft website.

[tom_newton]

To add to Geoff's post, it will also work if you can use "proxy autoconfiguration" via option 252 in DHCP. It's a bit odd, really.

 

Note: Option 252 et al have some security implications, use with care.

[pkombala]

I try with all ,eandian community nontransparent proxy not allow to update any windows client to microsoft update site ,transparent proxy is ok but I need password authentication through active directory

everything working fine only I face this windows update problem last 5 days please help me