Automatic Updates
- From: "Aman Bedi" <gurkirpal.bedi@xxxxxxxxxxx>
- To: "'[ISAserver.org Discussion List]'" <isalist@xxxxxxxxxxxxx>
- Date: Wed, 26 Jan 2005 16:53:19 -0500
Hi guys ,
As I posted earlier I am having problem with auto updates. I was able to go
to windows update site manually after I made changes as per jim's article.
Created a rule ( windows update ) to allow access to all users to windows
update sites ( http, https)my clients are proxy / firewall client.
Still my clients cannot access updates thru autoupdates. The evnt log shows
event id 16 saying auto updates failed as could not connect. The ISA log for
that time is as follows.
The rule Windows Update is for all users
And HTTP and HTTPs access is for authenticated users.
I am using ISA 2004
The log shows that svchost.exe tries to connect and uses firewall client and
the user is scanbuy013$ (machinename$) which I guess is the system account.
The connection is initiated and closed instantly.
Do I have to add "system and network service" User for these rules ? or is
that included in all authenticated users ?
Any help would be great as I have been trying on this thing since days..
-----
Aman
-----
Original Client IP Client Agent Authenticated Client Service
Destination Host Name Source Port Processing Time Bytes Sent
Bytes Received Result Code HTTP Status Code Cache Information
Error Information Log Record Type Log Time Destination IP
Destination Port Protocol URL Action Rule Client IP
Client Username Source Network Destination Network HTTP Method
192.168.1.191 svchost.exe:3:5.1 - 1701 0
0 0 0x0 0x0 0x0 Firewall 1/26/2005
15:57 64.4.21.188 443 HTTPS Initiated Connection
Windows Update 192.168.1.191 SCANBUYHQ\SCANBUY013$ Internal
External
192.168.1.191 svchost.exe:3:5.1 - 1701 0
0 2151 0x80074e24 0x0 0x0 Firewall
1/26/2005 15:57 64.4.21.188 443 HTTPS Closed Connection
Windows Update 192.168.1.191 SCANBUYHQ\SCANBUY013$ Internal
External
0.0.0.0 - Yes Proxy - 0 0 2151 70
13 0x0 0x0 Web Proxy Filter 1/26/2005 15:57 64.4.21.188
443 - - Failed Connection Attempt -
192.168.1.191 - - - -
192.168.1.191 svchost.exe:3:5.1 - 1700 109
0 0 0x0 0x0 0x0 Firewall 1/26/2005
15:57 64.4.21.188 80 HTTP Initiated Connection HTTP
and HTTPS access 192.168.1.191 SCANBUYHQ\SCANBUY013$ Internal
External
192.168.1.191 svchost.exe:3:5.1 - 1699 94
0 0 0x0 0x0 0x0 Firewall 1/26/2005
15:57 64.4.23.29 80 HTTP Initiated Connection HTTP
and HTTPS access 192.168.1.191 SCANBUYHQ\SCANBUY013$ Internal
External
Other related posts:
