Hello All,

I've got a WSUS server deployed on my internal network (223.0.0.x) I'd like my TMG2010 (used as backend firewall) to get updates for it (and for all machine in my DMZ). WSUS server IP 223.0.0.240. TMG backend 223.0.0.60. When I try wuauclt /detectnow I get

Denied Connection

BACKEND 7/24/2015 1:55:05 PM Log type: Firewall service Status: The policy rules do not allow the user request. Rule: Default rule Source: Local Host (223.0.0.60:10090) Destination: Internal (223.0.0.240:8530) Protocol: Unidentified IP Traffic (TCP:8530)

even though I've created a rule for HTTP all ports (both direction).

Can you please help on the above?

Cheers beppe

Additional information

<dir>
<dir>

Number of bytes sent:

0 Number of bytes received: 0

Processing time:

0ms Original Client IP: 223.0.0.60

</dir>
</dir> 

HI,

you must create a new protocol definition for port 8530 TCP. This protocol definition must be used in a firewall policy rule to allow WSUS communication