[fw-wiz] RE: PIX Problem

From: Spearman, William CONT (FISC YOKO) (William_W_Spearman_at_yoko.fisc.navy.mil)
Date: 07/28/04

  • Next message: Melson, Paul: "RE: [fw-wiz] (no subject)" 
    To: "Wizards List Firewall (E-mail)" <firewall-wizards@honor.icsalabs.com>
Date: Wed, 28 Jul 2004 11:11:27 +0900

    Wizards,

    I really hate the taste of leather soled shoes.

    Matt and Mark, thanks for the replies and the questions.

    The PIX was configured with the following acl:

    filter active x 80 0.0.0.0 0.0.0.0 0.0.0.0 0.0.0.0

    Needless to say, this was the problem and the solution all rolled in to
    one.

    Thanks again for your time, and sorry I wasted it!

    Bill Spearman
    LAN Manager
    FISC Yokosuka
    DSN: 243-9102
    Comm: 81-46-816-9102

    Wizards,

    I've just joined, so if this has been a discussion in the past and you
    will lead me to the thread in the archives, I'll go there.

    We've encountered a problem with the PIX firewall and it's interaction
    with Windows Update (from Windows 2000 workstation sp4).

    Using the following url:
    http://v4.windowsupdate.microsoft.com/en/default.asp (which is the
    default) we see a message from the update server that, and I quote:

    "Administrators Only
    To install items from Windows Update, you must be logged on as an
    administrator or a member of the Administrators group. If your computer
    is connected to a network, network policy settings may also prevent you
    from completing this procedure.
    "

    HOWEVER, when we change the "http" to "https", we see this:

    "Checking for the latest version of the Windows Update Software"
    followed by "Welcome to Windows Update"

    Have any of you see this through your PIX or heard reports of this
    through any other venue?

    Bill Spearman
    LAN Administrator
    FISC Yokosuka
    DSN: 243-9102
    Comm: 81-46-816-9102

    _______________________________________________
    firewall-wizards mailing list
    firewall-wizards@honor.icsalabs.com
    http://honor.icsalabs.com/mailman/listinfo/firewall-wizards

    • application/x-pkcs7-signature attachment: smime.p7s
  • Next message: Melson, Paul: "RE: [fw-wiz] (no subject)"

    Relevant Pages

    • RE: Windows 98SE - Windows update problem
      ... My WinME machine has been getting updates every week for a couple years - ... today it says "Administrators Only" ... ... network policy settings may also preventyou from ... > I CAN RUN WINDOWS UPDATE FOR OFFICE, BUT NOT FOR WINDOWS UPDATE IT'S SELF. ...
      (microsoft.public.windowsupdate)
    • [fw-wiz] (no subject)
      ... with Windows Update. ... administrator or a member of the Administrators group. ... network policy settings may also prevent you ... HOWEVER, when we change the "http" to "https", we see this: ...
      (Firewall-Wizards)
    • Re: [fw-wiz] (no subject)
      ... The http and https were done on the same machine, same user, same ... What specifically leads you to believe that it's the PIX at fault? ... > administrator or a member of the Administrators group. ... > is connected to a network, network policy settings may also prevent you ...
      (Firewall-Wizards)
    • RE: [fw-wiz] (no subject)
      ... feature of the PIX itself that could disrupt this is the HTTP fixup. ... However, connecting through a PIX running 6.3, I run Windows Update ... > as an administrator or a member of the Administrators group. ...
      (Firewall-Wizards)
    • Re: Unknown Administrator
      ... >>More than 2 Administrators were found on this computer. ... >>Network policy settings prevent you from using Windows ... > Update to download and install updates on your computer. ... > problems with Windows Update. ...
      (microsoft.public.windowsxp.security_admin)