Local WSUS Server

[jiandc]

Hi,

I noticed this error message in the System Messages view/window of Wingate:

Object: Authentication
Time: 22-Aug-2005 11:45:57
Message ID: 0301
Description: Authentication failed - user Administrator on 192.168.18.20 requested http://WSUSServer:8530/selfupdate/wuident.cab

Could this be the reason why some computers don't appear in the Windows Update Server console? I have already configured IE not to use proxy for local address and also added 192.*.*.* in the exceptions list.

The user Administrator has full access to Wingate and the internet and can download files from the internet.

WSUSServer is a local Win2000 Server connected to our LAN.

I can access and administer the server using http://WSUSServer:8530/wsusadmin/ from my PC.

[jamesc]

I can access and administer the server using http://WSUSServer:8530/wsusadmin/ from my PC.

a) Does your PC successfully bypass the proxy?
b) Can you access http://wsusserver:8530/selfupdate/wuident.cab from your PC?
c) Does your PC have the same WinGate connection method / IE setup as other computers that cannot access?

[jiandc]

a) Does your PC successfully bypass the proxy?

ANS: I don't think my PC has bypassed the Proxy since I can see my PC accessing http://wsusserver from wingate activity view.


b) Can you access http://wsusserver:8530/selfupdate/wuident.cab from
your PC?

ANS: Yes, I can access and have succesfuly downloaded the wuident.cad file


c) Does your PC have the same WinGate connection method / IE setup as other computers that cannot access?

ANS: Yes, all computers have thesame IE Setting.

[jamesc]

ANS: I don't think my PC has bypassed the Proxy since I can see my PC accessing http://wsusserver from wingate activity view.

1. If you are getting "http://wsusserver " shown in WinGate's activity Window, then IE is not correctly set to bypass the proxy. What version of IE are you using?
2. What connection methods do you connect to the WinGate server with? Proxy / NAT / WinGate Internet Client (WGIC) / Intercepts?

I will also ask my colleagues for some feedback on your post.

[jiandc]

Hi,

We are using IE 6.

I don't understand what you really wanted to know with your second question.

We are using Wingate as our Proxy Server.

For Authentication, we use the Java Client and Assumed users using IP Addresses.

General Purpose Internet Sharing (NAT) is also enabled.

I applied Transparent Proxy (Sessions Configuration) on Port 80.

[jamesc]

I don't understand what you really wanted to know with your second question.

a) How do the clients share the internet connection from the WinGate server.
1. Do they only use Proxy? How? (e.g. statically set in IE)
2. Do they only use NAT?
3. Do they only use the WinGate Internet Client ( WGIC)?
4. Do they use a combination of all/some methods?

b) 1. Are you sure you have correctly set IE to bypass the proxy server for local addresses and exceptions? Can you test with a different IP address?
2. Is the WSUSServer name added to the exception list?
3. Is the WSUSServer on the same subnet as the client computers?

[jiandc]

a) How do the clients share the internet connection from the WinGate server.
1. Do they only use Proxy? How? (e.g. statically set in IE)
- Proxy setting is manually and statically set in IE.
2. Do they only use NAT?
- NAT is enabled on the Proxy Server
3. Do they only use the WinGate Internet Client ( WGIC)?
- Some users/PCs use JAVA Client Auhtentication.
- Other PCs don't require login since they are assumed using IP Address.
4. Do they use a combination of all/some methods?

b) 1. Are you sure you have correctly set IE to bypass the proxy server for local addresses and exceptions? Can you test with a different IP address?
- Yes, I have added WSUSServer;192.*.*.* in the exceptions list.
2. Is the WSUSServer name added to the exception list?
3. Is the WSUSServer on the same subnet as the client computers?
Yes, they are in thesame subnet.

[jamesc]

So some people use the WGIC, and others use Proxy with Java authentication correct? No one uses NAT even though it is enabled; Correct?

[jiandc]

Yes on Proxy with Java Authentication and NAT. But NO on WGIC. I did not install WGIC on any of our PCs.

[jiandc]

My mistake. I forgot to Enable the "Bypass proxy for local sites (pingable sites)" under Connection.

Now our WSUS Server is working fine and clients are getting updates from the server.

Thank you very much for the support James..

[jamesc]

That is really great to hear that you have resolved this issue jiandc.