![]() ![]() Configure the firewall to allow your other WSUS servers to connect to the first server The IP addresses associated with these domains are constantly changing, so don't try to use IP address ranges instead.įor a scenario in which WSUS is failing to get updates because of firewall configurations, see article 885819 in the Microsoft Knowledge Base. You must configure your firewall to allow the first WSUS server to access any URL within these domains. Your first WSUS server must have outbound access to ports 80 and 443 on the following domains: If your company restricts access, you'll need to configure your firewall to allow your WSUS server to access Microsoft domains. Although most corporate firewalls allow this type of traffic, some companies restrict internet access from the servers because of security policies. To get updates from Microsoft Update, the WSUS server uses ports 80 and 443 for the HTTP and HTTPS protocols. If a corporate firewall is between WSUS and the internet, you might have to configure that firewall to ensure that WSUS can get updates. Configure your firewall to allow your first WSUS server to connect to Microsoft domains on the internet This is an advanced configuration that's beyond the scope of this article. Updates are exported from the first server onto removable media, carried across the air gap, and imported onto the second server. A second WSUS server on the protected network serves the updates to the client computers. One WSUS server with internet access collects the updates from Microsoft. If your network is "air gapped"-if it does not have access to the internet at all-you can still use WSUS to provide updates to client computers on the network. Proxy: If you identified that WSUS needs to use a proxy server to have internet access, you need to configure proxy settings in the WSUS server.įirewall: If you identified that WSUS is behind a corporate firewall, you'll have to take additional steps at the edge device to allow WSUS traffic. #Kaseya ssh proxy update#Updates: Specify the way this server will get updates (from Microsoft Update or from another WSUS server). You can then start configuring the following WSUS network settings: #Kaseya ssh proxy download#Is the server's firewall configured to allow clients to access the server?Ĭan this computer connect to the upstream server (such as the server that's designated to download updates from Microsoft Update)?ĭo you have the name of the proxy server and the user credentials for the proxy server, if you need them? ![]() Set up the client computers to receive their updates from the WSUS server.īefore you start the configuration process, be sure that you know the answers to the following questions: Configure client computers to receive updates from the WSUS server Set up the client computers to establish secure connections to the WSUS server.Ģ.6. Configure client computers to establish SSL connections with the WSUS server Secure WSUS with the Secure Sockets Layer protocolĬonfigure the Secure Sockets Layer (SSL) protocol to help protect WSUS.Ĭreate computer groups in the WSUS Administration Console to manage updates in your organization.Ģ.5. Use the WSUS Configuration Wizard to perform the base WSUS configuration.Ģ.3. Configure WSUS by using the WSUS Configuration Wizard This article walks you through the following procedures: TaskĬonfigure your firewall and proxy settings to allow the server to make the connections that it needs.Ģ.2. You also need to configure your client computers to receive their updates from the WSUS server. #Kaseya ssh proxy install#Applies to: Windows Server 2022, Windows Server 2019, Windows Server 2016, Windows Server 2012 R2, Windows Server 2012Īfter you install the Windows Server Update Services (WSUS) server role on your server, you need to properly configure it. ![]()
0 Comments
Leave a Reply. |
Details
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |