What is the Windows Update server address?

[btswein]

Hello,

I am the IT admin for a plastics manufacturing company. We have a very restricted internet policy for some of our warehouse workers that really do not need web access but do need network access. We are running a FortiGate 110C physical firewall and Windows 7 x64 in a Domain. I am having issues with Windows Update being blocked, so my question is, what is the Windows Update server address? I need to "white list" it within the firewall. I tried looking in the logs but with 100 some users, the log moves very fast.

Thank you for your assistance!


-Brian

 

[carwiz]

Configure the Firewall Between the WSUS Server and the Internet

 

[btswein]

Configure the Firewall Between the WSUS Server and the Internet

Thank you, but I should have clarified. We are not running as a WSUS configuration on our Domain--not yet anyways, I'm new here. Each computer individually connects to Windows Update at staggered intervals.

 

[carwiz]

The URLs are the same. You said there's a white list capability in the firewall and it's rejecting the updates. Those are the URLs used by all PCs to obtain updates. I'm not sure what you're asking then.

 

[LMiller7]

Like most very busy websites Windows Update does not have a single IP address. The URL will resolve to a number of different IP addresses in a round robin fashion to spread the load.

 

[btswein]

Like most very busy websites Windows Update does not have a single IP address. The URL will resolve to a number of different IP addresses in a round robin fashion to spread the load.

I understand that, but wouldn't the URL be the same to the public regardless of their internal setup?

 

[btswein]

The URLs are the same. You said there's a white list capability in the firewall and it's rejecting the updates. Those are the URLs used by all PCs to obtain updates. I'm not sure what you're asking then.

We have several profiles (ie Restricted, Manager Level Internet, Unrestricted, etc) Based on the employees roll. Windows Update is classified as "Downloads and Freeware." I have this blocked on Restricted for obvious reasons. I can, however, override this by URL.