Endian blocking Microsoft Update and Microsoft Activation

[Guest]

[stealthkk]

I have EFW 2.2 final, and a really weird problem.
Whether the http proxy is on or off, 99.9% of internet traffic works fine and is unhindered.
If the http proxy is OFF, none of my internal machines can get to MS Update and non can activate via MS activation servers. It's like having it off blocks all MS communications.
If the http proxy is ON, MS update works fine. But I don't want to have it on, I want it off. I use OpenDNS for the http filtering (and yes, I've tried setting my DNS servers in the uplink back to my ISP's default, that's not it).
What could be going on? I've tried everything I know, and I'm sure that what I've explained above is consistent, I've tested it out on many computers: http proxy off - ms update broken, proxy on - ms update works ?!?!?!?!?!?!
You'd think, if anything, it would be the other way around!
Help!

[npeterson]

Are you authenticating through the proxy? If so you may need to setup the microsoft domains to be accessed with out authentication

Add the following domains to Proxy->Http->Authentication->Domain Without Authentication:

.windowsupdate.com
.microsoft.com

For Grins i would also add them to Proxy->HTTP->Content Filer->Allow The Following Sites:
windowsupdate.com
microsoft.com

[livio]

I have posted a solution to this at:

http://www.securitywithpassion.com.au/index.php/component/option,com_agora/Itemid,136/id,138/task,topic/


or search the Forum under Resolutions for 'msupdate'

[rejetto]

I have the same problem.
As the topic starter reported, he does NOT want/need the proxy to be enabled, and me neither.
For long i fought this problem, that's strangely related to only some computers in this office i'm working.
Finally, after reading this topic, i enabled the http proxy as a workaround, and it works.
This solution seems to be acceptable by me, as i require authentication but no working password exists, and it's bypassed only for the update servers. The proxy should be unusable for any other usage.
Anyway it's a workaround, and as such it leaves shadows that a professional always dislikes.

[pkombala]

I have the same problem.

For me I am using non_transparent  proxy with active directory integrated everything working fine , but windows update for any client behind proxy is not working activx .......hang browser ,I try to put new policy without authentication to microsoft update site   .windowsupdate..................
If I change my http proxy to nontransparent - to transparent  update  working with windows 7  ...still Xp not updating (proxycfg)
Last 5days I am try to solve this problem ....please help
I am using ISA2004 microsoft proxy it is working fine all updates

[fitzrik]

Any updates on this?

I have this issue hgappening in two sites now. One uses Windows authentication. One uses none. Both are blocking windows update and only seems to be happening with 2.5.1 One site previously had 2.4 and this was not a problem.

I've tried adding in the update sites to whitelist but this doesn't seem to make a difference.

Thanks

R

[dda]

I am having this problem as well if anyone has a solution for it.