Re: Firewall and Word 2004 Security Updatel



Thank you for trying to help but I do not understand most of your
instructions. I got as far as proxycfg.exe and the answer I got was:
WinHttpSetings: Direct access <no proxy server>.

I don't know what a proxy server name is or if I have one and don't
know how to use the advanced settings relating to port numbers with
Zone Alarm. I think I will post my problem on the Zone Alarm forum and
maybe someone there can help me with changing those settings rather
that what you suggested.

In general though, I am bugged with Microsoft for not making this
easier. Why would they even suggest turning off my firewall? I have no
trouble with the WindowsXP updates so why does this have to be so much
harder?

Thanks again,
Sandy
On Thu, 28 Apr 2005 13:06:43 -0700, "Pat Walters [MSFT]"
<a-patwal@xxxxxxxxxxxxxxxxxxxx> wrote:

>"Sandy M",
>
>There is no need to shut off your firewall, but there may be a need to set up an
>exception object for Windows Updates / Microsoft Update / Office Updates.
>
>1. Set the proxy server explicitly for services
> a. At the command prompt, type: proxycfg.exe and press the <Enter> key.
> b. Verify that the server is not listed as <null> nor the port listed as
><null>
> c. Assuming the proxy information does not match what you have listed in
>Internet Explorer, please follow the remaining steps.
> d. Type the following (assuming you know the proxy server and port you are
>using: proxycfg.exe -p (proxy server name):(port number)
> Example: proxycfg.exe -p MyServerRocks:8080
> e. Repeat step 1a, looking to see if the Server name and port match the
>entries in Internet Explorer.
> f. Once this is correct, open an Internet Explorer window and try again.
>
>The following is an example specific to ISA Server 2000, but please adapt the
>instructions to YOUR firewall to build the same settings in your given
>situation:
>
>On ISA Server 2000
>- Disable global authentication for web proxy requests
> 1. Open the ISA Management MMC
> 2. Select View, then Advanced
> 3. Expand Servers and Arrays
> 4. Right-Click on the <Array Name>
> 5. Select Properties
> 6. Select Outgoing Web Requests
> 7. Uncheck Ask Unauthenticated users for identification
> 8. Click Apply,
> 9. When prompted, select Save the changes and restart the service(s)
> 10. Click OK
>
>- Create a destination set for Windows Update domains
> 1. Expand <Array Name> and Policy Elements
> 2. Right-click Destination Sets
> 3. Select New, then click Set
> 4. Enter "Windows Update" in the Name field, and click Next
> 5. Click Add
> 6. Enter *.download.microsoft.com in the Domain field
> 7. Leave the Path field blank
> 8. Click OK
> 9. Repeat steps 4 through 7 for the following domains:
> *.windowsupdate.com
> *.windowsupdate.microsoft.com
> download.windowsupdate.com
>10. Click OK
>
>- Create an anonymous Site and Content rule for Windows Update requests
> 1. Expand Access Policy
> 2. Right-click Site and Content Rules
> 3. Select New, then Rule
> 4. Enter "Windows Update" in the Name field, and click Next
> 5. Select Allow and click Next
> 6. Select Allow access based on destination, and click Next
> 7. In the "Apply this rule to:" drop-down list, select Specified Destination
>Set
> 8. In the Name: drop-down list, select Windows Update
> 9. Click Next, then click Finish
>
>Please reply back to this thread and let us know how this goes!
>
>Sincerely,
>
>Pat Walters [MSFT]
>
>This posting is provided "AS IS" with no warranties, and confers no rights. Use
>of included script samples are subject to the terms specified at
>http://www.microsoft.com/info/cpyright.htm";
>
>"Sandy M" <cahaba2REMOVE@xxxxxxxxx> wrote in message
>news:i7vt61960aldv62e43sc8io1et6cnh16i6@xxxxxxxxxx
>> How can I do the recommended security update with my ZA firewall?
>>
>> I get this error message: "The Office Update site can perform
>> detection on your computer and tell you exactly which updates you
>> need! To take advantage of this service, please return to this site
>> with MSN Explorer or Microsoft Internet Explorer version 5.0 or later
>> installed. If you are already using Internet Explorer 5.0 or later and
>> you are using Internet Security, Internet Privacy, or personal
>> firewall products, the products may be interfering with browser
>> detection. Please temporarily turn off these products and then try
>> visiting this site again. For more information about this issue, see
>> the Microsoft Knowledge Base article 832765."
>>
>> I do not want to turn off my firewall even for a minutes or two while
>> Microsoft does its thing checking for the latest update appropriate
>> for my computer.
>>
>> Any suggestiong of a setting I can change to allow this update search?
>> I would rather forgo the security update than risk something attacking
>> my computer while ZA is disabled.
>>
>> Thanks, Sandy
>> --
>> reply to cahaba2@xxxxxxxxxxxxxxxxxxx taking out the obvious
>

--
reply to cahaba2@xxxxxxxxxxxxxxxxxxx taking out the obvious
.



Relevant Pages

  • Re: Firewall and Word 2004 Security Updatel
    ... Verify that the server is not listed as nor the port listed as ... Internet Explorer, ... instructions to YOUR firewall to build the same settings in your given ... Enter "Windows Update" in the Name field, ...
    (microsoft.public.windowsupdate)
  • Re: windows update thinks my windows 2003 Server is a MAC
    ... SPA wrote: ... firewall, reboot, and then ensure that the native WS2003 firewall was enabled? ... Please post the last 50 or so lines of the WindowsUpdate.log from the server with the issue. ... please uninstall the "firewall" feature and than test Windows Update. ...
    (microsoft.public.windowsupdate)
  • Re: Windows update error 80244019
    ... The requested URL does not exist on the server. ... Retry the download a couple ... But since the system recovery I know have Windows update error ...
    (microsoft.public.windowsupdate)
  • Re: Microsoft Internet Explorer
    ... And a firewall is most important. ... You need Internet Explorer to do Windows Update, ... My question is do you need to have |> Internet Explorer to run in your computer if you have DSL? ...
    (microsoft.public.windowsxp.general)
  • RE: Windows update access slow from my SBS 2003 Server
    ... I understand that the SBS server box can not apply ... access the following Windows Update web sites and use the HTTP and HTTPS ... you can configure the following settings on the ISA server: ... Microsoft CSS Online Newsgroup Support ...
    (microsoft.public.windows.server.sbs)

Loading