Allowing DMZ to get WIndows Updates
Posted on 2007-11-30
Have a PIX 515e, I need the web servers on the DMZ to get to the windows update site. I know how to open the servers to an outside IP but I don't know all the IPs, URLs and ports involved in the site process. I was successful in adding a couple IPs and and allowed 80/443 to them, got to the sites but IE is erroring out. One possiblity is that a previous admin "hardened" the OSs with leaving any documentation on what he did, but that is a different problem for a different post.
So what I'm looking for is a need in enable to allow the DMZ web servers out to the Internet sites or another possiblity is what do I need to allow them in to access the WSUS server. I also added a rule for 80/443 and modified the reg to point to the WSUS server without any checkin.