Guest

Cisco Web Security Appliance

Windows update fails when connecting through the WSA when authentication is enabled

Document ID: 117994

Updated: Jul 17, 2014

Contributed by Denis Jacobi and Siddharth Rajpathak, Cisco TAC Engineers.

   Print


Contributed by Denis Jacobi and Siddharth Rajpathak, Cisco TAC Engineers.

Question:

Why do windows updates fail when connecting through the WSA when authentication is enabled?


Symptoms:
The Windows update fails when connecting through the proxy with NTLM enabled. When a client sits behind the proxy requiring authentication, Windows update just hangs or prints an error message.


Environment:
Cisco Web Security Appliance (WSA), all versions of AsyncOS

Solution:
 

Note: This Knowledge Base article references software which is not maintained or supported by Cisco  The information is provided as a courtesy for your convenience. For further assistance, please contact the software vendor.


Windows updates and Microsoft BITS application does not support authentication.


You will need to add the following Windows update servers to an authentication exemption custom URL category on the Web Security Appliance (WSA). Then create a new identity, select 'No Authentication' in "Authentication" section and select the new custom URL category as a membership criteria.  Finally, create a new access policy and under "Identities and Users" section, select the auth exempt identity to it.
------------------------------------------------------------------------------------

download.windowsupdate.com
.windowsupdate.microsoft.com
.update.microsoft.com
.download.windowsupdate.com
update.microsoft.com
.windowsupdate.com
download.microsoft.com
windowsupdate.microsoft.com
ntservicepack.microsoft.com
wustat.windows.com
c.microsoft.com
------------------------------------------------------------------------------------


This allows unauthenticated access to the above servers and should resolve the issue.

More information can be found at:
http://support.microsoft.com/default.aspx?scid=kb;en-us;885819

http://support.microsoft.com/kb/842309

 

Updated: Jul 17, 2014
Document ID: 117994