We have several W2K3 servers that are located within a DMZ subnet and we
would like for them to be able to go to the Internet to do Windows Critical
Updates.

What ports should be allowed out to make this happen.
Do you use a Host file only or allow external DNS resolution from your DMZ
servers?



Thanks,
Fred

Hi Fred,

You need to open HTTP and HTTPS protocols.

Personally I usually use Proxy servers to allow servers access to the
internet.

--
Mike
Microsoft MVP - Windows Security

"Fred Yarbrough" <fcyarbrough@yahoo.com> wrote in message
news:udR2sCD3GHA.5048@TK2MSFTNGP05.phx.gbl...
>
> We have several W2K3 servers that are located within a DMZ subnet and we
> would like for them to be able to go to the Internet to do Windows
> Critical Updates.
>
> What ports should be allowed out to make this happen.
> Do you use a Host file only or allow external DNS resolution from your DMZ
> servers?
>
>
>
> Thanks,
> Fred
>

Thanks!
Fred





"Miha Pihler [MVP]" <mihap-news@atlantis.si> wrote in message
news:epFpeGD3GHA.4108@TK2MSFTNGP04.phx.gbl...
> Hi Fred,
>
> You need to open HTTP and HTTPS protocols.
>
> Personally I usually use Proxy servers to allow servers access to the
> internet.
>
> --
> Mike
> Microsoft MVP - Windows Security
>
> "Fred Yarbrough" <fcyarbrough@yahoo.com> wrote in message
> news:udR2sCD3GHA.5048@TK2MSFTNGP05.phx.gbl...
>>
>> We have several W2K3 servers that are located within a DMZ subnet and we
>> would like for them to be able to go to the Internet to do Windows
>> Critical Updates.
>>
>> What ports should be allowed out to make this happen.
>> Do you use a Host file only or allow external DNS resolution from your
>> DMZ servers?
>>
>>
>>
>> Thanks,
>> Fred
>>
>
>