RE: [fw-wiz] (no subject)

From: Melson, Paul (PMelson_at_sequoianet.com)
Date: 07/28/04

  • Next message: Paul Robertson: "[fw-wiz] Recent spate of rejections" 
    To: "Spearman, William CONT (FISC YOKO)" <William_W_Spearman@yoko.fisc.navy.mil>, "Wizards List Firewall (E-mail)" <firewall-wizards@honor.icsalabs.com>
Date: Wed, 28 Jul 2004 10:08:05 -0400

    The error is likely due to NTLM HTTP authentication failing. The only
    feature of the PIX itself that could disrupt this is the HTTP fixup.
    You can disable this in config mode by entering 'no fixup http 80'.
    However, connecting through a PIX running 6.3(3), I run Windows Update
    through that URL with the HTTP fixup enabled.

    PaulM

    > -----Original Message-----
    > We've encountered a problem with the PIX firewall and it's
    > interaction with Windows Update (from Windows 2000 workstation sp4).
    >
    > Using the following url:
    > http://v4.windowsupdate.microsoft.com/en/default.asp (which is the
    > default) we see a message from the update server that, and I quote:
    >
    > "Administrators Only
    > To install items from Windows Update, you must be logged on
    > as an administrator or a member of the Administrators group.
    > If your computer is connected to a network, network policy
    > settings may also prevent you from completing this procedure. "
    >
    > HOWEVER, when we change the "http" to "https", we see this:
    >
    > "Checking for the latest version of the Windows Update
    > Software" followed by "Welcome to Windows Update"
    >
    > Have any of you see this through your PIX or heard reports of
    > this through any other venue?
    _______________________________________________
    firewall-wizards mailing list
    firewall-wizards@honor.icsalabs.com
    http://honor.icsalabs.com/mailman/listinfo/firewall-wizards

  • Next message: Paul Robertson: "[fw-wiz] Recent spate of rejections"

    Relevant Pages

    • [fw-wiz] RE: PIX Problem
      ... We've encountered a problem with the PIX firewall and it's interaction ... with Windows Update. ... administrator or a member of the Administrators group. ... network policy settings may also prevent you ...
      (Firewall-Wizards)
    • Re: Windows update behind cisco pix
      ... If some machines are working and some aren't, it mostly likely is not your ... We use a PIX, and have never had any issues with any of our servers or ... computers running Windows Update, and we don't have any special ports opened ... | I would get "unable to verify publisher on activeX" then Got error 0X8dddd ...
      (microsoft.public.windowsupdate)