Issues with windows update since moving to Sophos web gateway.

That being said, I'm leaning toward the problem being with the BITS range requests.  The SWA typically does not allow range requests (download the middle of a file) because they cannot be virus scanned.  When Microsoft does background downloading up updates they use BITS which does this.  But if I recall correct we trust all Microsoft servers so the BITS should work.

I would contact Support, because I don't think your problem is typical.

That being said, I'm leaning toward the problem being with the BITS range requests.  The SWA typically does not allow range requests (download the middle of a file) because they cannot be virus scanned.  When Microsoft does background downloading up updates they use BITS which does this.  But if I recall correct we trust all Microsoft servers so the BITS should work.

I would contact Support, because I don't think your problem is typical.

I have opened a support ticket for this issue.  #6015577.  The only answer I can get from support is:

You may need to create a rule in your firewall for all traffic from Windows update should not pass thru the appliance anymore.You may need to create a rule in your firewall for all traffic from Windows update should not pass thru the appliance anymore.

I never had to create a rule like this when we had Trend Micro.  I don't understand why the web appliance would block windows update traffic even though I have added microsoft.com and windowsupdate.com to my local site list.  And if it's blocking that, what else is it blocking?

Thanks

Charles

When you say that you put it in the Local Site List, did you also set the Risk to Trusted?

I would continue with support.  Creating a firewall rule would work, but is not the normal solution.  It bypasses the problem rather than resolves it.

I have not given up on the support ticket yet.  I did reply asking why I have to do that when I didn't with Trend.  I did go into the local site list and make windowsupdate.com and microsoft.com trusted websites.

Thanks

Charles

So it looks like a bad windows update was the cause of windows updates not working.

http://superuser.com/questions/951960/windows-7-sp1-windows-update-stuck-checking-for-updates

But during the troubleshooting I did change microsoft.com and windowsupdate.com to Trusted in my local site list.  Anyways, windows updates are now working.

Thanks

Charles