Smoothwall - Network Guardian - Windows Updates

[Macinator]

I am just finishing my eval and waiting for the PO to get processed to go live. One remaining issue I have had is with Windows Updates. There is something being blocked when it tries to search for the ActiveX control.

 

There is nothing showing as blocked in the Web Filter Realtime monitor.

 

All Groups are allowed the default Windows Updates category Always. I have also added a custom area with every Microsoft URL I have been able to locate. I have tried turning off the

 

As soon as I switch the Proxy back to my original software/filter it goes right through.

 

Any ideas or solutions to this? Once I go live I will contact support but it seems the answers on this forum are incredibly helpful and often seem to be answered by Smoothwall staff.

 

Thanks,

 

Scott

[contink]

Found this one out myself...

 

You need to make sure that the account you're running MS/Win Updates from is associated with a group that has activex permissions.

 

Sometimes the account will be associated with the wrong group though which is what threw me.

 

You can see what I found with this here:

http://www.edugeek.net/forums/security/31282-school-guardian-things-ive-learned.html#post298594

 

The whole thread is useful but I've linked from where you might be hitting your problem.

[tom_newton]

Mac: try the "non-realtime" logs, and turn off the "ignore filter" for a more complete view of what is going on.

 

If you are still having trouble after checking out contink's suggestions, please do not hesitate to give me a bell on my direct line or drop me an email (see sig - although I am on UK time, support will be open after I go home

[Macinator]

Contink -

 

Thanks!!! The thread you pointed to lead me right to the answer. Somehow my search both here and on Smoothwall missed the target.

 

https://support.smoothwall.net/index.php?_m=knowledgebase&_a=viewarticle&kbarticleid=211

 

Answer was allow Unauthenticated Users to Microsoft Sites and then allowing the UnauthenticatedIP access to filtered.

 

Went right through.

 

Thank a bunch!

 

Scott

[contink]

Nay problem... doubtless I'll be turning to you for help in the future

[tom_newton]

You know, sometimes I think SmoothWall users in the corporate world are missing out. This board brings a tear to my eye, it really does

[contink]

You know, sometimes I think SmoothWall users in the corporate world are missing out. This board brings a tear to my eye, it really does

 

You sentimental young fool... Careful, you'll become an idealist and then they'll really knock you down

 

Know what you mean though...

[john]

awwwww how kind are we, shows how much we value our sponsors by us getting the products from you, how much we like the product and how good it is that so many of us do! I for one love it and find it a joy to use and so glad to have got it here. So well done to the Smoothwall team for a great product!

 

PS - can't wait for the March update with the SSL Proxy blocking as it won't be long before my children get that one sussed out!!!

[tom_newton]

PS - can't wait for the March update with the SSL Proxy blocking as it won't be long before my children get that one sussed out!!!

 

Make sure you turn on cert checking already - I think it's a "per group" option.

 

SSL Interception is scary-good though

[Sylv3r]

Make sure you turn on cert checking already - I think it's a "per group" option.

 

SSL Interception is scary-good though

 

Hi Tom

 

Do you have a release date for the SP? From what I heard from Gavin before Christmas it sounded a fantastic enhancement. Will it just come through similar to a standard Smoothwall update?

[john]

One step ahead my good sir, its been on since before the kids got onto the box I remembered that one from the last one I did but thanks for the reminder Its set to the default group and no others are set to override that at present.

[tom_newton]

Hi Tom

 

Do you have a release date for the SP? From what I heard from Gavin before Christmas it sounded a fantastic enhancement. Will it just come through similar to a standard Smoothwall update?

 

Was supposed to be saint paddy's day, but the devs have asked for an extra week's testing. I did suggest they work nights as well, but al things being equal we're looking at 24/3. It will be *exactly* like an ordinary update.