WSUS For Clients With No Internet Access

This is more of a functional question than an issue.
Right now I have WSUS set to 'Store update files locally' and it works great. With an ever expanding number and size of updates, I don't have space to keep storing the necessary updates on my WSUS server.
If I set WSUS to 'Do not store update files locally', will my clients without internet access still be able to get updates? Many of my devices are behind firewalls that do not permit access to the internet in any form. I'm trying to avoid adding
storage if at all possible.
Thanks,
Brian

Correct, if you set WSUS to 'do not store update files locally', then your clients without internet access will not be able to access Microsoft Update to download the files without you creating a firewall exception. Which sounds like an awkward way to do
it.
(1) Are you on top of your regular maintenance with WSUS, ie, declining superseded updates, running Server Cleanup Wizard in the recommended order?
(2) Are you confident that the classification of updates being downloaded is appropriate and nothing un-needed (e.g drivers/absent OS) are being downloaded? Have you chosen to download the space-hogging express installation files?
(1) and (2) would be generally better practise then 'do not store updates locally', but if bandwidth is cheap or irrelevant for you, then perhaps you might be tempted to not store updates locally. In your situation where you have a reason to deny clients
internet access, it would seem like a lot of paperwork, and technical expertise, to only allow them internet access for updates. (plus, I'm not sure it's possible, just presume it would be)
What are your numbers? (size of WSUSContent, WSUSDatabase, space on drives?)

Similar Messages

Clients with no internet access

We have many servers whose IP address is blocked from receiving any internet traffic. The block is done in the ACLS of the edge router not in a firewall. Some organizations on campus have requested this for security reasons. These systems are unable to complete
the installation. If I change the IP address temporarily to an unblocked address, the install will complete and the client communicates with the site server normally. Any command line switches that could be used to get the install to run?
Errors in ccmsetup.log:
Only one MP "Siteserver" is specified. Use it. ccmsetup 10/2/2014 2:46:27 PM 1068 (0x042C)
Have already tried all MPs. Couldn't find DP locations. ccmsetup 10/2/2014 2:46:27 PM 1068 (0x042C)
GET 'https://SITESERVER/CCM_Client/ccmsetup.cab' ccmsetup 10/2/2014 2:46:27 PM 1068 (0x042C)
[CCMSETUP] AsyncCallback(): ----------------------------------------------------------------- ccmsetup 10/2/2014 2:47:26 PM 1068 (0x042C)
[CCMSETUP] AsyncCallback(): WINHTTP_CALLBACK_STATUS_SECURE_FAILURE Encountered ccmsetup 10/2/2014 2:47:26 PM 1068 (0x042C)
[CCMSETUP]                : dwStatusInformationLength is 4
ccmsetup 10/2/2014 2:47:26 PM 1068 (0x042C)
[CCMSETUP]                : *lpvStatusInformation is 0x1
ccmsetup 10/2/2014 2:47:26 PM 1068 (0x042C)
[CCMSETUP]            : WINHTTP_CALLBACK_STATUS_FLAG_CERT_REV_FAILED is set
ccmsetup 10/2/2014 2:47:26 PM 1068 (0x042C)
[CCMSETUP] AsyncCallback(): ----------------------------------------------------------------- ccmsetup 10/2/2014 2:47:26 PM 1068 (0x042C)
Failed to send HTTPS request. (Error at WinHttpSendRequest: 12175) ccmsetup 10/2/2014 2:47:26 PM 1068 (0x042C)
WinHttpRequestReponse failed with a non-recoverable failure, 12175 ccmsetup 10/2/2014 2:47:26 PM 1068 (0x042C)
DownloadFileByWinHTTP failed with error 0x80072f8f ccmsetup 10/2/2014 2:47:26 PM 1068 (0x042C)
CcmSetup failed with error code 0x80072f8f ccmsetup 10/2/2014 2:47:26 PM 1068 (0x042C)

This sounds like it be the issue
http://blog.danovich.com.au/2010/07/09/sccm-clients-not-installing-in-native-mode/
This indicates that the computer name that the client is using to contact the management point doesn’t match the FQDN in the Web Server certificate Subject, which is installed on the server and configured in IIS.
The solution was to request (from the enterprise certificate authority) and assign a new certificate in IIS. Using IIS 7.5, open the IIS manager console, click on the server name, double-click Server Certificates and then Create Domain Certificate.
Fill in the details and select your enterprise EA server. It is important here to use the FQDN of the server in the Common Name section. Once complete, head to the Default Web Site, edit Bindings and click on edit for https, then select your newly issued certificate.
You don’t need to restart IIS. Initiate a new client install – it should be successful this time.

I received a text today while at work about iCloud keychain verification code. I have not signed up for it or anything that uses it. I work out of the city with limited internet access so not sure why I would be getting this. Is my info safe??

I received a text today while at work about iCloud keychain verification code. I have not signed up for it or anything that uses it. I work out of the city with limited internet access so not sure why I would be getting this. I only got this number about a month ago. Apparently someone else had the number before because I get texts from his family members wondering whats going on. I got one yesterday and the person didn't seem to thrilled that the number was cutoff and today I got 2 texts about iCloud Keychain which I don't even know what it is. Seems suspicious to me. If the person who use to own the number is doing it he should know it is not his number anymore because he obviously didn't pay his bills. I'm not too sure about iCloud Keychain so just want to know my info safe?? It says it can store credit card numbers which is what gets me worried. Frankly I think it's pretty stupid to save that kind if information with any kind of app. But I don't want some random person trying to access my personal information because they are bitter they lost their number. Please let me know as soon as possible so I can change passwords or anything that is needed.
thanks

If it were me, I would go to my carrier and get a new number. Since you have only had it for a month, the inconvenience would be minimal.
Barry

Using Creative Cloud on a desktop in a rural area with no Internet access

I have a Creative Cloud subscription for my home desktop. I will soon be participating in a photography workshop in a rural area with NO INTERNET ACCESS. I don't own a laptop and will be hauling my desktop to the place we're staying. I know the software is installed on the machine and I should be fine with using it without online access, correct? Am I also correct in thinking it won't be "seen" as being used on a second computer because while I use it on this trip I won't have Internet access and therefore no IP address?

Hi there
The only thing that might cause you trouble is if your workshop is over a month long. While using applications downloaded from Creative Cloud, internet access is required once a month for a routine license check. Here's a snipet from the Creative Cloud FAQ:
http://www.adobe.com/products/creativecloud/faq.html
Do I need ongoing Internet access to use my Creative Suite applications?
Because your Creative Suite applications are installed directly on your computer, you will not need an ongoing Internet connection to use them on a daily basis. However, you will need to be online when you install and license your software, and at least once every 30 days thereafter. The software will alert you when you need to connect to the Internet for a license status check.
A quick note: if the product is unable to verify your license at the 30 day mark, a 7-day grace period will begin. However, if you are not able to access internet within those 7 days, your applications will be blocked (Soucre: http://forums.adobe.com/message/4513667#4513667)
Regarding your second question - as long as you are using the same device you already have your applications installed on, you'll still only have one device registered to your account.
If you have any more questions, please don't hesitate to post here again.
Cheers!

I recently bought an i phone 5, but in the home with wireless internet access, it si countinued when off, i do not know what reason. but i go to apple store, the phone can working with Wi-Fi

i recently bought an i phone 5, but in the home with wireless internet access , it is continued when off, sometimes can not working,
i do not know what reason, but i went to apple store, Ha, the phone can go to Wi - Fi and connected is good.

but in the home with wireless internet access , it is continued when off, sometimes can not working,
What does "it is continued when off" mean?
And the same for "somtimes can not working"?

A basic phone with no internet access.

I need a phone for my son with no internet access whatsoever. I have him set up on a plan that allows me to block data but if he has access to wifi he can still access the internet. I am talking about non smartphones. I am frustrated and disappointed that AT&T (or anyone else) does not offer a phone that is not wifi enabled. Even a $9.99 tracfone gives web access!

Thanks to both of you for your replies. My son only needs a phone when he travels which is about 10 days out of the year so gophone is definitely the way to go. I just found that you have to be very careful with the phone that you use. Most phones today - even the $10-$15 flip phones - allow WiFi access. You can block paid data use on the phone but if a phone allows for WiFi connectivity there is no way to block that access in public places where WiFi is free (i.e. airports). I had to go with an older (used) phone to find one that did not have WiFi connectivity. We had an old Pantech Laser laying around that worked. Then I had to have AT&T block the data to the phone. FYI for gophones they cannot block this in the store you have to call in and do it over the phone. This was not explained to me and so the first trip with the phone my son was accessing data. I gave AT&T an earful as I had carefully explained I needed data blocked and was told it was done. They credited me the data charges. I am not sure if the AT&T Z222 has WiFi capability or not. In the specs it says it does but the salespeople at the AT&T store says it does not. I had originally tried a $9.99 Tracfone from Walmart and was told that it did not have data access. That information was incorrect.

I want to install Flash on a computer with no internet access. How do I do this?

I want to install Flash on a computer with no internet access. When I tried to download, I got a message that Flash is already installed. Yes, it is, on my PC. I want it on my laptop, too. How do I accomplish this?

Download the Adobe Flash Player offline FULL installer directly by right clicking one of the following links and selecting "Save target as" (IE), "Save Link As" (FIrefox) or "Download Linked File As" (Safari).
Flash Player 12.0.0.44 for ActiveX (Internet Explorer)
Flash Player 12.0.0.44 Plug-in (All other browsers)
Flash Player 12.0.0.44 (Mac OS X)

Adobe id with no internet access?

I bought Photoshop Elements 12 (in a box) for a friend of mine. She installed it on a computer with no internet access and now the "creat adobe id or your program will quit working" dialog box keeps coming up. How can she keep her program working without an internet connection? I do not appreciate Adobe forcing people who buy physical product to register them online!

She will have to connect the machine to the Internet at least once to activate and log-in with an Adobe ID. It does state on the box that an Internet connection is required to do this. If that is a real problem for her then, depending on where you bought it, you may be able to return it for a full refund.
Cheers,
Neale
Insanity is hereditary, you get it from your children
If this post or another user's post resolves the original issue, please mark the posts as correct and/or helpful accordingly. This helps other users with similar trouble get answers to their questions quicker. Thanks.

Updating flash player on a computer with no internet access

I need to update flash player on a computer with no internet access. How can I select to have it downloaded to a flash drive? The download process keeps adding it to the computer I am using, but that is not where the update is needed. What am I doing wrong?

Download the Adobe Flash Player installer directly by clicking one of the following links.
Flash Player for ActiveX (Internet Explorer)
Flash Player Plug-in (All other browsers)

Change Flash Security Settings With No Internet Access?

Hello
I have firefox at home with no internet access, is it posible
to alter my flash installation so it enables access to other
content. it brings up a settings window but that just goes to a
dead url.
I have a a collage disk but it will not run untill I alter
the settings of flash to allow acess to other site, other location?
Please help?

phil ashby wrote:
> Glad it worked!
>
> Urami, I did some fairly extensive tests with this idea
and it seemed to work
> each time - although all our corporate machines have the
same build. Even if
> the directory didn't exist, if you created it and placed
the SOL inside, it
> words. In the end I never actually used it as I
distributed the app as an exe
> which doesn't have such draconian security requirements,
also it obviously
> overwrites the users original version, if present.
I agree with you, I tried different SOL editor and it work
when i tried.
I believe what I used was more than SOL explorer/reader
rather then editor
even tho it has this option is seem the file stop working and
hence the
problem I was claiming about the files not work properly.
Perhaps it was changing something and flash did not like
these changes.
Anyhow, I did try another tool and did manage to work.
Thanks
> Personally, I think it's a bit of a hole in the whole
Flash security issue.
Won't comment on that one :) Something just seem way
unnecessary and silly...
Best Regards
Urami
!!!!!!! Merry Christmas !!!!!!!
Happy New Year
<urami>
If you want to mail me - DO NOT LAUGH AT MY ADDRESS
</urami>

Alternative to WSUS for use with NAC

I'm looking for thoughts on alternatives to WSUS for use with Cisco Network Admission Control. I'm primarily looking for increased speed. Thanks.

I don't see the value in getting that particular time on the first day of the current monthYou're completely right about that.
That makes me assume on some autopilot that we have another case of YASTDCOVV or YACOSTADISC
+'Yet Another String To Date Comparison Or Vice Versa' or 'Yet Another Case Of Storing Time And Date In Separate Columns'+
However, three other people interpreted the request the same yet different than I did so my assumption is probably wrong Only Evaleah can tell....
Edited by: hoek on Oct 21, 2009 8:54 PM OP has a name, you blunt Hoek, so use it!

How can I install a jre on client machines with no Internet Access

Hi
I have a lot of client machines located throughout the country which are connected to a central network (Oracle) application server. The client machines do not have internet access. The application now uses an applet which is accessible from the network. I would like to use the <jsp:plugin> tag to automatically download and install a jre on the client browsers that don't have a jre installed, when they access the jsp page. Unfortunately, even using iepluginurl="http://server-address/jinstall-1_4_2-windows-i586.cab, the client machines still need to access the internet to install the JRE as the cab file needs to access files at the Sun site.
Is there any online jre installer, that can be used on a network where the client machines do not have internet access? Or do I need to install the JRE manually on each machine? The browsers are all Microsoft Internet Explorer.
Thanks
David

Thanks for your reply ChuckBing.
Unfortunately I had already copied the instructions I found in the Sun documentaion to the letter and it still needed access to the internet. In the end I solved the problem by pointing the iepluginurl to a non existent file and putting a URL, pointing to an offline JRE executable on the server, as the message that appears when the applet cannot be loaded. The clients then have the choice of downloading the JRE or installing it online by clicking on the URL.
Thanks anyway.
David

How can I get Adobe Reader for a PC with no Internet access?

Hi
I have a neighbour who doesn't have Internet access. I have downloaded the installer but the installer requires Internet access. Can I install it on my computer and copy the program file or folder to my neighbours computer?
Thanks
Geoff

Good day Geoff,
You can download the Adobe Reader 10.0.0 installer .EXE file from here:
ftp://ftp.adobe.com/pub/adobe/reader/win/10.x/10.0.0/en_US/AdbeRdr1000_en_US.exe
Once you've downloaded it, you can burn it to a disc or copy it to a thumbdrive to bring to the PC that's offline.
Please let us know if you have any questions.
Kind regards,
David

ATV2 via ethernet to imac with no internet access - possible?

I have the ATV2 and its works great - and i can use it for streaming my own films that we have produced and encoded to mp4 - straight to my 36 inch TV in our living room...
...BUT I want to take my 36 inch TV with my iMac to a wedding exhibition and play my films on my 36 inch tv from my iMac - so i thought connect why dont i connect my ATV2 via an ethernet cable to my iMac then HMDI cable from the AVT2 to the TV and i should be able to access all the film content that is in iTunes as HD mp4 content on my iMac so prospective clients can see mp4 HD versions of our films - as at the exhibition they will be viewing them from about 3 feet away rather than the usual 10 -12 feet when viewing a DVD at home.
Would this work anyone tried it? i have read some folks have had problems doing this as they need to have internet access as they are accessing their .mac account for home sharing and with no internet avaibale i wont have that facility and dont need it at the exhibition.
Message was edited by: Allister Gourlay

Yes, I'd certainly try it before you go. I've tested this on the Apple TV 1 and confirmed it works but haven't tested it with my Apple TV 2.
If worst comes to worst using a cheap router will work, you don't need to connect it to the internet.

IPS Signature Updates with no Internet Access

Hi all,
I've got a bit of an interesting dilemma that I'm hoping that someone could help with. I have two distinct networks: A "regular" network, along with a "secure" network. I've not been involved in the setup/configuration, but I've been handed some work to do now that has me puzzled.
The two networks are separated with a pair of ASA devices with IPS modules installed. User access to the secure side works by using Cisco VPN client, terminating on the ASA's, and once connected applications are delivered via Citrix. Management of the ASA's involves connecting via management VPN to the "external" ASA interface, connecting to a management server via Citrix and from there, management via MARS, ASDM & IME.
My issue is that I have been asked to configure auto-updates for the IPS modules. However, there is no internet access from the secure network. Servers on the secure side can request files, etc, from the regular side but there is no direct access can be initiated from the regular side back to the secure network. There are no ASA devices that are contactable/manageable from the regular side.
I've read that it's possible to somehow download updates from cisco.com via FTP or similar, but I fail to see how I can automate the process. What I originally thought to do was to install another copy of IME on the regular network, set up a dummy device and there on configure auto-updates, but unfortunately the IPS needs to be contactable for that to work.
Can anybody think of a solution that could make this work for me?

Hi Jennifer,
Thanks for that, but the instructions in that document appear to be related to updating a sensor from an FTP server where the updates have already been copied to it.
I have searched and searched, but I'm unable to locate the relevant location to download the signatures direct via FTP/SCP. I have attempted to locate them on ftp.cisco.com, but with no luck.
Regards,
James

WSUS For Clients With No Internet Access

Similar Messages

Maybe you are looking for