Ports open to allow wsus to work

[ihaveaproblem]

What ports need to be open on your firewall for wsus to work?

Current my wsus server syncs fine but receives a message saying and I beleive it's the firewall blocking.

"the files for this update have not yet been downloaded. the update can be approved but will not be available to computers until the download is complete"

 

We use smoothwall for firewall/filtering.

[FN-GM]

I think its just standard 80 & 443 ports.

[glennda]

download is just port 80/443 I believe. From clients to server it varies depending on what is set in IIS I think - How to Determine the Port Settings Used by WSUS

 

 

EDIT: you will need to make sure it has unfiltered access and doesn't require auth.

[ihaveaproblem]

eh right well those ports should be open.

I've set the proxy on the server and in wsus console to use port 801 and then in smoothwall the server is listed as a web filter exception, so as far as I'm aware it is unfiltered.