Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 2 replies
  • Subscribers 2 subscribers
  • Views 1766 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

windowsupdates using WSUS

seanl
The WSUS updates are taking extremely long to download, or are refused by the firewall. The problem is that there is just not enough info in the log to tell me the reason for the refusal. Just get statuscode: 502 name="web request blocked"
Log extract:
2010:05:14-07:30:00 mail httpproxy[9797]: id="0002" severity="info" sys="SecureWeb" sub="http" name="web request blocked" action="block" method="GET" srcip="******" user="" statuscode="502" cached="0" profile="REF_bEXAwdGKMV (medusa)" filteraction="REF_DefaultHTTPCFFAction (Default content filter action)" size="6914" time="137949 ms" request="0xa5ca5c50" url="download.windowsupdate.com/.../plain"

I have tried to set the filters to skip all authentication, caching, antivirus, extension blocking, mime blocking, usrl filtering, content removal, ssl scanning, cetrificate checks, but that has not helped.
I've tried running it in transparent mode, and still no joy.

Any ideas?


This thread was automatically locked due to age.
Parents
  • 0
    size="6914" time="137949 ms"

    There's a timeout early enough in the process that the Astaro reports (incorrectly, I think) that it has blocked the URL.

    exceptions="av"

    I think the usual approach to avoid the above problem for windowsupdate.com is to select all exceptions.  On Monday, for one client, that wasn't enough, and I had to create a windowsupdate.com DNS group to put into the 'Transparent mode skiplist'.  Of course, that only works if you're in transparent mode.

    Cheers - Bob
Reply
  • 0
    size="6914" time="137949 ms"

    There's a timeout early enough in the process that the Astaro reports (incorrectly, I think) that it has blocked the URL.

    exceptions="av"

    I think the usual approach to avoid the above problem for windowsupdate.com is to select all exceptions.  On Monday, for one client, that wasn't enough, and I had to create a windowsupdate.com DNS group to put into the 'Transparent mode skiplist'.  Of course, that only works if you're in transparent mode.

    Cheers - Bob
Children
No Data