[Last Call] Learn how to a build a cloud-first strategyRegister Now

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 62
  • Last Modified:

Wsus installing sccm sup

Re jigging things

We have three servers
1 CAS
2 PRIMARYS

Desired
wsus installed on Cas.

Sup installed on all.  


Do I need wsus installed on primary's as well ? (That's what we have but seems redundant.  
Windows and sccm 2012r2


It's an off line system.  Updates are imported to wsus on CAS.
0
Mike Hammer
Asked:
Mike Hammer
  • 2
1 Solution
 
Mike HammerAuthor Commented:
Not neglected only put up yesterday eve
0
 
yo_beeDirector of ITCommented:
I do not have this setup, but I do not think so.  The only reason that WSUS is installed is to gather the updates from MS when they are published.  Once published your CAS that has WSUS installed will sync and the updates can be downloaded. Once downloaded you will push then package to the primary servers via Update Distribution Points.  

https://technet.microsoft.com/en-us/library/gg712696.aspx#BKMK_WSUSSyncSource
Typically, the top-level site in your hierarchy is configured to synchronize software updates metadata with Microsoft Update. When your corporate security policy does not allow access to the Internet from the top-level site, you can configure the synchronization source for the top-level site to use an existing WSUS server that is not in your Configuration Manager hierarchy. For example, you might have a WSUS server installed in your DMZ that has Internet access, but your top-level site does not. You can configure the WSUS server in the DMZ as your synchronization source for software updates metadata. You must ensure that the WSUS server in the DMZ synchronizes software updates that meet the criteria that you need in your Configuration Manager hierarchy. Otherwise, the top-level site might not synchronize the software updates that you expect. When you install the software update point, configure a WSUS connection account that has access to the WSUS server in the DMZ and confirm that the firewall permits traffic for the appropriate ports. For more information about the ports that are used by the software update point to the synchronization source, see the Software Update Point -- > Upstream WSUS Server section in the Technical Reference for Ports Used in Configuration Manager topic.
0
 
Mike HammerAuthor Commented:
Makes sense.  I'll accept if no other comments disagree by this evening

Thank you
0

Featured Post

NFR key for Veeam Backup for Microsoft Office 365

Veeam is happy to provide a free NFR license (for 1 year, up to 10 users). This license allows for the non‑production use of Veeam Backup for Microsoft Office 365 in your home lab without any feature limitations.

  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now