ISA Server allows Kaspersky updates

Hi, I have a very small network and some clients are not allowed internet access but are allowed windows updates.
I need to configure ISA so they can get Kaspersky updates, can anyone help?
(The rule that blocks Internet access is also blocking the updates)
HKFueyAsked:
Who is Participating?
 
HKFueyConnect With a Mentor Author Commented:
OK, thanks,
I may give that a go on Wednesday. In the meantime I have configured the Kaspersky to use my login (which has internet access) and this seems to work.
0
 
Raj-GTConnect With a Mentor Systems EngineerCommented:
First, you will need to monitor the logs to get the destination IPs Kaspersky update is using. And then create a new policy above your current Internet access policy allowing "all outbound protocols" from internal to Kaspersky's IP range access to "all users".
0
 
LANm0nk3yCommented:
The other thing you can do is, generally ISA have a maintenance list or exclusion list for things you need to keep systems up to date.  The list would allow anyone/anything to go to the site w/o authentication.  If you check this list, it should have Microsoft windows updates listed there.
0
 
Raj-GTSystems EngineerCommented:
LANM0nk3y is referring to System Policies allowing access to Windows Updates etc. I prefer to having different rules so it's easier to troubleshoot when things doesn't work.
0
All Courses

From novice to tech pro — start learning today.