Re: Microsoft Update

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance



No; don't do that.
Don't use an "allow all" policy.

--
Jim Harrison (ISA SE)

This posting implies no warranty and confers no rights.
http://catb.org/~esr/faqs/smart-questions.html



"Jony" <Jony@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:7F4AB498-2449-4B0D-9889-E7B9A94DBDAA@xxxxxxxxxxxxxxxx
Yes, you need to configure a rule to allow ISA server connects from "local
host" to external NIC.
create new access rule, next, set the action to allow, next, select from
"this rule applies to:" list "All outbound traffic", next, click on Add,
expand the network list and select "local host", next, click on Add, expand
the network list and select "External", next, next, finish.
You are now able to access the internet on your ISA server but don't forget
to configure the LAN proxy to the local server name.

"John" wrote:

I thought the default configuration allows traffic between ISA box and
other
networks BUT does not allow traffic to pass through ISA box from one
network
to another. I was lead to believe that because I can get to the internet
from my ISA2006 box. I just can't get Windows (or Microsoft) Update to
scan
for updates.

If that isn't true, could you give me an example of the rule?

Thank you.

"Jim Harrison (ISA SE)" <jmharr@xxxxxxxxxxxxxxxxxxxx> wrote in message
news:B3D3ACF9-41D5-4B0E-A5C8-2F2605A4FC5B@xxxxxxxxxxxxxxxx
You have to configure rules to allow traffic to, from and across ISA.
By default, "none shall pass" (apologies to John Cleese).

--
Jim Harrison (ISA SE)

This posting implies no warranty and confers no rights.
http://catb.org/~esr/faqs/smart-questions.html



"John" <a> wrote in message
news:ubPkU2bwIHA.4912@xxxxxxxxxxxxxxxxxxxxxxx
I've just finished installing ISA2006 on Windows Server 2003. ISA
configuration is now at default (I haven't changed anything). It's got 2
NICs (internal/external). I can access the internet from ISA box.

Trying to get updates from Microsoft Update
http://www.update.microsoft.com/microsoftupdate/v6/default.aspx?ln=en-us

After a few seconds, I see:

[Error number: 0x80072EFD]
The website has encountered a problem and cannot display the page you
are
trying to view. The options provided below might help you solve the
problem.
For self-help options:

Frequently Asked Questions
Find Solutions
Windows Update Newsgroup
For assisted support options:
Microsoft Online Assisted Support (no-cost for Windows Update issues)
Read more about steps you can take to resolve this problem (error number
0x80072EFD) yourself.

How exactly do I get updates for my ISA2006 box?






.



Relevant Pages

  • RE: ISA 2004 and the internet connection
    ... I understand the issue to be: Internet access became ... slow after you upgrade ISA 2000 to ISA 2004 for a month. ... Open the ISA Server management console, ... Microsoft CSS Online Newsgroup Support ...
    (microsoft.public.windows.server.sbs)
  • Re: cant ping gateway IP address
    ... Open ISA server, and find the "SBS Internet Access Rule", move it to the ... 'Microsoft Firewall' service. ...
    (microsoft.public.windows.server.sbs)
  • Re: Local computers cannot conect to the internet.
    ... Please run CEICW after you install ISA server. ... to configure the ISA to allow internal clients access Internet. ... Ensure client computer join SBS domain thru connectcomputer wizard. ...
    (microsoft.public.windows.server.sbs)
  • Re: Microsoft Update
    ... You are now able to access the internet on your ISA server but don't ... Microsoft Online Assisted Support (no-cost for Windows Update issues) ...
    (microsoft.public.isa)
  • Re: ISA Server 2004 with one NIC on DMZ
    ... What happens when you install a second NIC in the ISA firewall and then ... Tom and Deb Shinder's Configuring ISA Server 2004 ... server on dmz that resolves internet web sites. ...
    (microsoft.public.isa)