I need IP range of microsoft windows update server

['chris']

hi

I need IP range of microsoft online update servers to allow ActiveX at our firewall.

on my firewall box (watchguard) I cannot setup any DNS names.

kind regards
chris

[Steven Clementi · Accepted solution]

Chris:

Thats hard to say. Microsoft has LOTS of IP ranges.

If you ping windowsupdate.microsoft.com, you get something in the 207.46.x.x range. They have the whole range... 207.46.0.0 - 207.46.255.255


Click here for a bigger listing of ranges they use or have access to...  https://answers.microsoft.com/en-us/windows/forum/windows_other-networking/need-windows-update-servers-ip-address-range-to/0b0d3618-f74c-411d-bb46-58bd605f7abe

I am pretty sure Windows Update always comes from that specific range though... 207.46.x.x, but could be wrong.


Steven

[Note: broken link removed by Mod]

['chris']

hi

I've tried with 207.46.0.0 - 207.46.255.255
and it doesn't work.

but if I try to put in addition:
213.19.0.0 - 213.19.255.255
and
212.73.0.0 - 212.73.255.255
then it works well.

that's very strange and hard to understand, because there are not MS ranges.

greetings
chris

[Steven Clementi]

Those are RIPE netblocks. Your incoming traffic might be passing through them. Thats the only thing I can think of.

http://www.ripe.net



What is your external IP? or IP block? Obviously you do not need to disclose if you rather not. It's understood without question.


Steven

[David Frankham]

I assume you are trying to allow Windows Update connections to your workstations? Have you seen Microsoft's free Software Update Service (SUS) and Windows Server Update Service products?

http://www.microsoft.com/windowsserversystem/updateservices/evaluation/previous/default.mspx

http://www.microsoft.com/windowsserversystem/updateservices/default.mspx

Both of these services allow you to use a server (or many) on your network to download the patches and updates from MS Windows Update and distribute them automaticaly to your Windows clients.

See also Shavlik's HFNetChk product (not-free)(http://www.shavlik.com/hfnetchk-windows.aspx)

Anthony Cross