kevin.bailey

so after drilling into the issue some more, it appears that the EULA's are having issues downloading for a couple updates. The downloads of the EULA's is attempting to use port 8530, which I don't have open through the firewall. 8531 is open. I'm not sure why this is.

so you're saying that the first place a Internet-based client would look is internal unless some policy is pointing it to the Microsoft update site, correct? These machines aren't on the domain, so there shouldn't be a GPO setting that policy. Let me double-check and make sure somebody didn't configure a local policy.

I've got all of my DMZ clients setup as Internet-based clients with all certificates in place. Software packages download and install fine. However, software updates will not download. They seem stuck at 0%. From what I understand and from looking at the logs, Internet-based clients will look to Microsoft update site first for updates and then it should look to SCCM. Is this correct? is there any way to change the first option to be SCCM? None of my DMZ clients have Internet access, so they seem stuck. I've left my machines downloading updates overnight and they are still stuck at 0%. Any help would be appreciated.