Advertisement

02.05.2008 at 02:34AM PST, ID: 23137564
[x]
Attachment Details

ISA 2004 server won't update from WSUS server

Asked by WPHIT in MS Internet Security & Accel, Network Software Firewalls

Tags: Microsoft, ISA, 2004

We're running WSUS server 3.0 on a server which is working pretty problem-free at the moment, updating servers and workstations alike.

We've also got ISA 2004 running on a different box which is acting as a firewall for our company network.  Unfortunately I'm not much of an expert on ISA.  I have deployed several updates to the ISA server but the server isn't picking these up, even despite several wuauclt /detectnow attempts.

It seems that ISA is blocking the traffic to the WSUS server.  I've pasted some text from our windowsupdate.log below since attaching doesn't seem to be working.  When I visit http://wsus/selfupdate/iuident.cab  on the ISA box I get an error page displayed by the ISA server saying "Error Code: 403 Forbidden. The ISA Server denied the specified Uniform Resource Locator (URL). (12202)".

Following instructions from several posts on the Internet I've created a new access rule in ISA to allow HTTP, HTTPS and Kerberos-Sec (UDP) traffic from Local Host to WSUS for All Users.  This hasn't made any difference and, just in case, I've tried amending the rule to allow all outgoing traffic and adding other user groups such as 'Authenticated Users'.

Also noteworthy is the fact that when I visit the Microsoft Windows Update website the server has no problem checking for updates and picking up what it needs.

So I'm pretty certain it's ISA blocking the update traffic, I just can't figure out how to unblock it!


WindowsUpdate.log sample:

2008-02-05      08:18:42:713      1296      1678      AU      #############
2008-02-05      08:18:42:713      1296      1678      AU      ## START ##  AU: Search for updates
2008-02-05      08:18:42:713      1296      1678      AU      #########
2008-02-05      08:18:42:713      1296      1678      AU      <<## SUBMITTED ## AU: Search for updates [CallId = {6844A3A7-91B1-47D1-AB83-27DE47C878E1}]
2008-02-05      08:18:42:713      1296      900      Agent      *************
2008-02-05      08:18:42:713      1296      900      Agent      ** START **  Agent: Finding updates [CallerId = AutomaticUpdates]
2008-02-05      08:18:42:713      1296      900      Agent      *********
2008-02-05      08:18:42:713      1296      900      Agent        * Online = Yes; Ignore download priority = No
2008-02-05      08:18:42:713      1296      900      Agent        * Criteria = "IsHidden=0 and IsInstalled=0 and DeploymentAction='Installation' and IsAssigned=1 or IsHidden=0 and IsPresent=1 and DeploymentAction='Uninstallation' and IsAssigned=1 or IsHidden=0 and IsInstalled=1 and DeploymentAction='Installation' and IsAssigned=1 and RebootRequired=1 or IsHidden=0 and IsInstalled=0 and DeploymentAction='Uninstallation' and IsAssigned=1 and RebootRequired=1"
2008-02-05      08:18:42:713      1296      900      Agent        * ServiceID = {3DA21691-E39D-4DA6-8A4B-B43877BCB1B7}
2008-02-05      08:18:42:713      1296      900      Misc      Validating signature for C:\WINDOWS\SoftwareDistribution\SelfUpdate\Default\wuident.cab:
2008-02-05      08:18:42:728      1296      900      Misc       Microsoft signed: Yes
2008-02-05      08:18:42:728      1296      900      Misc      WARNING: WinHttp: SendRequestToServerForFileInformation failed with 0x80190193
2008-02-05      08:18:42:728      1296      900      Misc      WARNING: WinHttp: ShouldFileBeDownloaded failed with 0x80190193
2008-02-05      08:18:42:728      1296      900      Misc      WARNING: WinHttp: SendRequestToServerForFileInformation failed with 0x80190193
2008-02-05      08:18:42:728      1296      900      Misc      WARNING: WinHttp: ShouldFileBeDownloaded failed with 0x80190193
2008-02-05      08:18:42:728      1296      900      Misc      WARNING: WinHttp: SendRequestToServerForFileInformation failed with 0x80190193
2008-02-05      08:18:42:728      1296      900      Misc      WARNING: WinHttp: ShouldFileBeDownloaded failed with 0x80190193
2008-02-05      08:18:42:728      1296      900      Misc      WARNING: WinHttp: SendRequestToServerForFileInformation failed with 0x80190193
2008-02-05      08:18:42:728      1296      900      Misc      WARNING: WinHttp: ShouldFileBeDownloaded failed with 0x80190193
2008-02-05      08:18:42:728      1296      900      Misc      WARNING: DownloadFileInternal failed for http://wphedgbaston/selfupdate/wuident.cab: error 0x80190193
2008-02-05      08:18:42:728      1296      900      Setup      FATAL: IsUpdateRequired failed with error 0x80244018
2008-02-05      08:18:42:728      1296      900      Setup      WARNING: SelfUpdate: Default Service: IsUpdateRequired failed: 0x80244018
2008-02-05      08:18:42:728      1296      900      Setup      WARNING: SelfUpdate: Default Service: IsUpdateRequired failed, error = 0x80244018
2008-02-05      08:18:42:728      1296      900      Agent        * WARNING: Skipping scan, self-update check returned 0x80244018
2008-02-05      08:18:42:994      1296      900      Agent        * WARNING: Exit code = 0x80244018
2008-02-05      08:18:42:994      1296      900      Agent      *********
2008-02-05      08:18:42:994      1296      900      Agent      **  END  **  Agent: Finding updates [CallerId = AutomaticUpdates]
2008-02-05      08:18:42:994      1296      900      Agent      *************
2008-02-05      08:18:42:994      1296      900      Agent      WARNING: WU client failed Searching for update with error 0x80244018
2008-02-05      08:18:42:994      1296      d50      AU      >>##  RESUMED  ## AU: Search for updates [CallId = {6844A3A7-91B1-47D1-AB83-27DE47C878E1}]
2008-02-05      08:18:42:994      1296      d50      AU        # WARNING: Search callback failed, result = 0x80244018
2008-02-05      08:18:42:994      1296      d50      AU        # WARNING: Failed to find updates with error code 80244018
2008-02-05      08:18:42:994      1296      d50      AU      #########
2008-02-05      08:18:42:994      1296      d50      AU      ##  END  ##  AU: Search for updates [CallId = {6844A3A7-91B1-47D1-AB83-27DE47C878E1}]
2008-02-05      08:18:42:994      1296      d50      AU      #############
2008-02-05      08:18:42:994      1296      d50      AU      AU setting next detection timeout to 2008-02-05 13:18:42
2008-02-05      08:18:42:994      1296      d50      AU      Setting AU scheduled install time to 2008-02-09 10:00:00
2008-02-05      08:18:47:729      1296      900      Report      REPORT EVENT: {204B6591-8249-4C25-8D19-40A56442FFC6}      2008-02-05 08:18:42:728-0000      1      148      101      {D67661EB-2423-451D-BF5D-13199E37DF28}      0      80244018      SelfUpdate      Failure      Software Synchronization      Windows Update Client failed to detect with error 0x80244018.
2008-02-05      08:24:34:566      1296      900      PT      WARNING: Cached cookie has expired or new PID is available
2008-02-05      08:24:34:566      1296      900      PT      Initializing simple targeting cookie, clientId = 05aec7a7-69d5-44df-a082-6d81dd0efc92, target group = , DNS name = wphisa.admin.wphomes.org.uk
2008-02-05      08:24:34:566      1296      900      PT        Server URL = http://wphedgbaston/SimpleAuthWebService/SimpleAuth.asmx
2008-02-05      08:24:34:566      1296      900      PT      WARNING: GetAuthorizationCookie failure, error = 0x80244018, soap client error = 10, soap error code = 0, HTTP status code = 403
2008-02-05      08:24:34:566      1296      900      PT      WARNING: Failed to initialize Simple Targeting Cookie: 0x80244018
2008-02-05      08:24:34:566      1296      900      PT      WARNING: PopulateAuthCookies failed: 0x80244018
2008-02-05      08:24:34:566      1296      900      PT      WARNING: RefreshCookie failed: 0x80244018
2008-02-05      08:24:34:566      1296      900      PT      WARNING: RefreshPTState failed: 0x80244018
2008-02-05      08:24:34:566      1296      900      PT      WARNING: PTError: 0x80244018
2008-02-05      08:24:34:566      1296      900      Report      WARNING: Reporter failed to upload events with hr = 80244018.
2008-02-05      08:54:13:970      1296      1c80      PT      WARNING: Cached cookie has expired or new PID is available
2008-02-05      08:54:13:970      1296      1c80      PT      Initializing simple targeting cookie, clientId = 05aec7a7-69d5-44df-a082-6d81dd0efc92, target group = , DNS name = wphisa.admin.wphomes.org.uk
2008-02-05      08:54:13:970      1296      1c80      PT        Server URL = http://wphedgbaston/SimpleAuthWebService/SimpleAuth.asmx
2008-02-05      08:54:13:970      1296      1c80      PT      WARNING: GetAuthorizationCookie failure, error = 0x80244018, soap client error = 10, soap error code = 0, HTTP status code = 403
2008-02-05      08:54:13:970      1296      1c80      PT      WARNING: Failed to initialize Simple Targeting Cookie: 0x80244018
2008-02-05      08:54:13:970      1296      1c80      PT      WARNING: PopulateAuthCookies failed: 0x80244018
2008-02-05      08:54:13:970      1296      1c80      PT      WARNING: RefreshCookie failed: 0x80244018
2008-02-05      08:54:13:970      1296      1c80      PT      WARNING: RefreshPTState failed: 0x80244018
2008-02-05      08:54:13:970      1296      1c80      PT      WARNING: PTError: 0x80244018
2008-02-05      08:54:13:970      1296      1c80      Report      WARNING: Reporter failed to upload events with hr = 80244018.
2008-02-05      09:08:24:305      1296      1c80      PT      WARNING: Cached cookie has expired or new PID is available
2008-02-05      09:08:24:305      1296      1c80      PT      Initializing simple targeting cookie, clientId = 05aec7a7-69d5-44df-a082-6d81dd0efc92, target group = , DNS name = wphisa.admin.wphomes.org.uk
2008-02-05      09:08:24:305      1296      1c80      PT        Server URL = http://wphedgbaston/SimpleAuthWebService/SimpleAuth.asmx
2008-02-05      09:08:24:555      1296      1c80      PT      WARNING: GetAuthorizationCookie failure, error = 0x80244018, soap client error = 10, soap error code = 0, HTTP status code = 403
2008-02-05      09:08:24:555      1296      1c80      PT      WARNING: Failed to initialize Simple Targeting Cookie: 0x80244018
2008-02-05      09:08:24:555      1296      1c80      PT      WARNING: PopulateAuthCookies failed: 0x80244018
2008-02-05      09:08:24:555      1296      1c80      PT      WARNING: RefreshCookie failed: 0x80244018
2008-02-05      09:08:24:555      1296      1c80      PT      WARNING: RefreshPTState failed: 0x80244018
2008-02-05      09:08:24:555      1296      1c80      PT      WARNING: PTError: 0x80244018
2008-02-05      09:08:24:555      1296      1c80      Report      WARNING: Reporter failed to upload events with hr = 80244018.
2008-02-05      09:19:03:821      1296      1c80      PT      WARNING: Cached cookie has expired or new PID is available
2008-02-05      09:19:03:821      1296      1c80      PT      Initializing simple targeting cookie, clientId = 05aec7a7-69d5-44df-a082-6d81dd0efc92, target group = , DNS name = wphisa.admin.wphomes.org.uk
2008-02-05      09:19:03:821      1296      1c80      PT        Server URL = http://wphedgbaston/SimpleAuthWebService/SimpleAuth.asmx
2008-02-05      09:19:03:821      1296      1c80      PT      WARNING: GetAuthorizationCookie failure, error = 0x80244018, soap client error = 10, soap error code = 0, HTTP status code = 403
2008-02-05      09:19:03:821      1296      1c80      PT      WARNING: Failed to initialize Simple Targeting Cookie: 0x80244018
2008-02-05      09:19:03:821      1296      1c80      PT      WARNING: PopulateAuthCookies failed: 0x80244018
2008-02-05      09:19:03:821      1296      1c80      PT      WARNING: RefreshCookie failed: 0x80244018
2008-02-05      09:19:03:821      1296      1c80      PT      WARNING: RefreshPTState failed: 0x80244018
2008-02-05      09:19:03:821      1296      1c80      PT      WARNING: PTError: 0x80244018
2008-02-05      09:19:03:821      1296      1c80      Report      WARNING: Reporter failed to upload events with hr = 80244018.
2008-02-05      09:36:58:208      1296      d48      PT      WARNING: Cached cookie has expired or new PID is available
2008-02-05      09:36:58:208      1296      d48      PT      Initializing simple targeting cookie, clientId = 05aec7a7-69d5-44df-a082-6d81dd0efc92, target group = , DNS name = wphisa.admin.wphomes.org.uk
2008-02-05      09:36:58:208      1296      d48      PT        Server URL = http://wphedgbaston/SimpleAuthWebService/SimpleAuth.asmx
2008-02-05      09:36:58:208      1296      d48      PT      WARNING: GetAuthorizationCookie failure, error = 0x80244018, soap client error = 10, soap error code = 0, HTTP status code = 403
2008-02-05      09:36:58:208      1296      d48      PT      WARNING: Failed to initialize Simple Targeting Cookie: 0x80244018
2008-02-05      09:36:58:208      1296      d48      PT      WARNING: PopulateAuthCookies failed: 0x80244018
2008-02-05      09:36:58:208      1296      d48      PT      WARNING: RefreshCookie failed: 0x80244018
2008-02-05      09:36:58:208      1296      d48      PT      WARNING: RefreshPTState failed: 0x80244018
2008-02-05      09:36:58:208      1296      d48      PT      WARNING: PTError: 0x80244018
2008-02-05      09:36:58:208      1296      d48      Report      WARNING: Reporter failed to upload events with hr = 80244018.
2008-02-05      09:58:29:600      1296      1778      PT      WARNING: Cached cookie has expired or new PID is available
2008-02-05      09:58:29:600      1296      1778      PT      Initializing simple targeting cookie, clientId = 05aec7a7-69d5-44df-a082-6d81dd0efc92, target group = , DNS name = wphisa.admin.wphomes.org.uk
2008-02-05      09:58:29:600      1296      1778      PT        Server URL = http://wphedgbaston/SimpleAuthWebService/SimpleAuth.asmx
2008-02-05      09:58:29:616      1296      1778      PT      WARNING: GetAuthorizationCookie failure, error = 0x80244018, soap client error = 10, soap error code = 0, HTTP status code = 403
2008-02-05      09:58:29:616      1296      1778      PT      WARNING: Failed to initialize Simple Targeting Cookie: 0x80244018
2008-02-05      09:58:29:616      1296      1778      PT      WARNING: PopulateAuthCookies failed: 0x80244018
2008-02-05      09:58:29:616      1296      1778      PT      WARNING: RefreshCookie failed: 0x80244018
2008-02-05      09:58:29:616      1296      1778      PT      WARNING: RefreshPTState failed: 0x80244018
2008-02-05      09:58:29:616      1296      1778      PT      WARNING: PTError: 0x80244018
2008-02-05      09:58:29:616      1296      1778      Report      WARNING: Reporter failed to upload events with hr = 80244018.Start Free Trial
[+][-]02.05.2008 at 07:53AM PST, ID: 20823966

At Experts Exchange, members can ask their questions to thousands of technology professionals, also known as Experts. Experts compete and collaborate to answer those questions by leaving comments like this one.

Start your 7-day free trial to view this Expert Comment or ask the Experts your question.

 
[+][-]02.05.2008 at 11:08AM PST, ID: 20825800

At Experts Exchange, members can ask their questions to thousands of technology professionals, also known as Experts. Experts compete and collaborate to answer those questions by leaving comments like this one.

Start your 7-day free trial to view this Expert Comment or ask the Experts your question.

 
[+][-]02.05.2008 at 11:18AM PST, ID: 20825892

At Experts Exchange, members can ask their questions to thousands of technology professionals, also known as Experts. Experts compete and collaborate to answer those questions by leaving comments like this one.

Start your 7-day free trial to view this Expert Comment or ask the Experts your question.

 
[+][-]02.06.2008 at 02:01AM PST, ID: 20830713

Often, when Experts are collaborating with members who have asked questions, they will request additional information about the problem. Askers respond with an author comment like this one.

Start your 7-day free trial to view this Author Comment or ask the Experts your question.

 
[+][-]02.06.2008 at 08:53AM PST, ID: 20833545

Assisted solutions are selected by the member who asked the question as a comment that contributed to their question's solution.

Start your 7-day free trial to view this Assisted Solution or ask the Experts your question.

 
[+][-]02.11.2008 at 01:30AM PST, ID: 20864919

Often, when Experts are collaborating with members who have asked questions, they will request additional information about the problem. Askers respond with an author comment like this one.

Start your 7-day free trial to view this Author Comment or ask the Experts your question.

 
[+][-]04.14.2008 at 07:41AM PDT, ID: 21350411

View this solution now by starting your 7-day free trial. Setting up your free trial is quick, easy, and secure. We will return you to this solution, unlocked, when you're done.

 

About this solution

Zones: MS Internet Security & Accel, Network Software Firewalls
Tags: Microsoft, ISA, 2004
Sign Up Now!
Solution Provided By: WPHIT
Participating Experts: 2
Solution Grade: A
 
 
 
Loading Advertisement...
20080716-EE-VQP-32 / EE_QW_2_20070628