General
cancel
Showing results for 
Search instead for 
Did you mean: 

I need IP range of microsoft windows update server

SOLVED
Go to solution
'chris'
Super Advisor

I need IP range of microsoft windows update server

hi

I need IP range of microsoft online update servers to allow ActiveX at our firewall.

on my firewall box (watchguard) I cannot setup any DNS names.

kind regards
chris

4 REPLIES
Steven Clementi
Honored Contributor
Solution

Re: I need IP range of microsoft windows update server

Chris:

Thats hard to say. Microsoft has LOTS of IP ranges.

If you ping windowsupdate.microsoft.com, you get something in the 207.46.x.x range. They have the whole range... 207.46.0.0 - 207.46.255.255


Click here for a bigger listing of ranges they use or have access to... http://ws.arin.net/whois/?queryinput=Microsoft

I am pretty sure Windows Update always comes from that specific range though... 207.46.x.x, but could be wrong.


Steven

Steven Clementi
HP Master ASE, Storage and Clustering
MCSE (NT 4.0, W2K, W2K3)
VCP (ESX2, Vi3, vSphere4, vSphere5)
RHCE
NPP3 (Nutanix Platform Professional)
'chris'
Super Advisor

Re: I need IP range of microsoft windows update server

hi

I've tried with 207.46.0.0 - 207.46.255.255
and it doesn't work.

but if I try to put in addition:
213.19.0.0 - 213.19.255.255
and
212.73.0.0 - 212.73.255.255
then it works well.

that's very strange and hard to understand, because there are not MS ranges.

greetings
chris
Steven Clementi
Honored Contributor

Re: I need IP range of microsoft windows update server

Those are RIPE netblocks. Your incoming traffic might be passing through them. Thats the only thing I can think of.

http://www.ripe.net



What is your external IP? or IP block? Obviously you do not need to disclose if you rather not. It's understood without question.


Steven
Steven Clementi
HP Master ASE, Storage and Clustering
MCSE (NT 4.0, W2K, W2K3)
VCP (ESX2, Vi3, vSphere4, vSphere5)
RHCE
NPP3 (Nutanix Platform Professional)
David Frankham
Occasional Visitor

Re: I need IP range of microsoft windows update server

I assume you are trying to allow Windows Update connections to your workstations? Have you seen Microsoft's free Software Update Service (SUS) and Windows Server Update Service products?

http://www.microsoft.com/windowsserversystem/updateservices/evaluation/previous/default.mspx

http://www.microsoft.com/windowsserversystem/updateservices/default.mspx

Both of these services allow you to use a server (or many) on your network to download the patches and updates from MS Windows Update and distribute them automaticaly to your Windows clients.

See also Shavlik's HFNetChk product (not-free)(http://www.shavlik.com/hfnetchk-windows.aspx)

Anthony Cross