What is the Windows Update server address?

btswein · 02 May 2014

Hello,

I am the IT admin for a plastics manufacturing company. We have a very restricted internet policy for some of our warehouse workers that really do not need web access but do need network access. We are running a FortiGate 110C physical firewall and Windows 7 x64 in a Domain. I am having issues with Windows Update being blocked, so my question is, what is the Windows Update server address? I need to "white list" it within the firewall. I tried looking in the logs but with 100 some users, the log moves very fast.

Thank you for your assistance!

-Brian

carwiz · 02 May 2014

Configure the Firewall Between the WSUS Server and the Internet

btswein · 02 May 2014

carwiz said:

Configure the Firewall Between the WSUS Server and the Internet

Thank you, but I should have clarified. We are not running as a WSUS configuration on our Domain--not yet anyways, I'm new here. Each computer individually connects to Windows Update at staggered intervals.

carwiz · 02 May 2014

The URLs are the same. You said there's a white list capability in the firewall and it's rejecting the updates. Those are the URLs used by all PCs to obtain updates. I'm not sure what you're asking then.

LMiller7 · 02 May 2014

Like most very busy websites Windows Update does not have a single IP address. The URL will resolve to a number of different IP addresses in a round robin fashion to spread the load.

btswein · 02 May 2014

LMiller7 said:

Like most very busy websites Windows Update does not have a single IP address. The URL will resolve to a number of different IP addresses in a round robin fashion to spread the load.

I understand that, but wouldn't the URL be the same to the public regardless of their internal setup?

btswein · 02 May 2014

carwiz said:

The URLs are the same. You said there's a white list capability in the firewall and it's rejecting the updates. Those are the URLs used by all PCs to obtain updates. I'm not sure what you're asking then.

We have several profiles (ie Restricted, Manager Level Internet, Unrestricted, etc) Based on the employees roll. Windows Update is classified as "Downloads and Freeware." I have this blocked on Restricted for obvious reasons. I can, however, override this by URL.