windowsupdate error

[sysgraph]

Hello forum,

I'm a new visitor on this forum and I've a big problem.

When I use Wingate Proxy 6.0, I've encountered many problems with Windowsupdate.

In my company the boss want that any users can only visits the Windowsupdate website, but when I try to install any upgrade, I receive some error message, so inform me that the upgrade installation failed.

I've create a ban list criteria for this solution, the criteria is the follow:

"NOT SERVER NAME CONTAINS WINDOWSUPDATE" or
"NOT SERVER NAME CONTAINS WINDOWSUPDATE.MICROSOFT.COM" or
"NOT HTTP URL CONTAINS WINDOWSUPDATE" or
"NOT HTTP URL CONTAINS WINDOWSUPDATE.MICROSOFT.COM" and other...

There is a solution for my problem?

Many thanks and best regards

Daniele Galassi

[adrien]

Hi

You have to be very careful if you put "NOT" rules into a ban list, for the following reason.

Any time a request matches anything in a banlist, it is banned.

If you have more than one entry like this in your banlist, you risk creating a total block, since one request cannot be two different requests.

For instance if you have 3 items in your banlist, A, B, and C, then a request is allowed if it is NOT(A OR B OR C)

If A and B and C are NOT rules, i.e. NOT A1 = A, etc, then this becomes

NOT (NOT A1 OR NOT B1 OR NOT C1)

NOT (A OR B OR C) is the same as NOT A AND NOT B AND NOT C

So the above reduces to

A1 AND B1 AND C1

This means that a request will only be allowed if it doesn't match ALL of the criteria you set. In your case, the server name would have to contain windowsupdate, and also contain windowsupdate.microsoft.com, and also the URL would have to contain windowsupdate and also contain windowsupdate.microsoft.com and also match any other criteria you have specified.

Adrien

[kgoodknecht]

Hello forum,

I'm a new visitor on this forum and I've a big problem.

When I use Wingate Proxy 6.0, I've encountered many problems with Windowsupdate.

In my company the boss want that any users can only visits the Windowsupdate website, but when I try to install any upgrade, I receive some error message, so inform me that the upgrade installation failed.

I've create a ban list criteria for this solution, the criteria is the follow:

"NOT SERVER NAME CONTAINS WINDOWSUPDATE" or
"NOT SERVER NAME CONTAINS WINDOWSUPDATE.MICROSOFT.COM" or
"NOT HTTP URL CONTAINS WINDOWSUPDATE" or
"NOT HTTP URL CONTAINS WINDOWSUPDATE.MICROSOFT.COM" and other...

There is a solution for my problem?

Many thanks and best regards

Daniele Galassi

You need to allow download.microsoft.com and download.windowsupdate.com to be able to actually download the updates.

[adrien]

aha, in which case this method of specifying rules won't work, cos one server can't be both download.microsoft.com, and also download.windowsupdate.com

So, if you only want to allow these two sites, don't use the banlist at all.

turn that off, and go to the advanced tab, add 2 filters like this

Filter 1
server contains download.windowsupdate.com
Filter 2
server contains download.microsoft.com

Then only these 2 sites will be allowed.