Application ms-update on WSUS 6.2 and later

[LCMember2041]

Why application ms-upate usage only port 80/443 when WSUS 6.2 an later usage port 8530/8531 (Step 3: Configure WSUS) ?

Robert Ogonowski

[HULK · Accepted solution]

Hello Robert,

This services/port are already added with Application MS-SMS. So, you have to allow ms-sms application on the security profile in order to allow/identify WSUS 6.2 traffic.

Description: System Center Configuration Manager, formerly Systems Management Server (SMS), is a systems management software product by Microsoft for managing large groups of Windows-based computer systems. SMS provides remote control, patch management, software distribution, and hardware and software inventory.

Hope this helps.

Thanks

[HULK]

Hello Robert,

You should ask this to Microsoft :smileyhappy:, they will guide you towards the right direction.

Thanks

[LCMember2041]

:smileyhappy: but Palo may add this port to application ms-update

Robert

[HULK · Accepted solution]

Hello Robert,

This services/port are already added with Application MS-SMS. So, you have to allow ms-sms application on the security profile in order to allow/identify WSUS 6.2 traffic.

Description: System Center Configuration Manager, formerly Systems Management Server (SMS), is a systems management software product by Microsoft for managing large groups of Windows-based computer systems. SMS provides remote control, patch management, software distribution, and hardware and software inventory.

Hope this helps.

Thanks

[LCMember2041]

Thanks.

How did you find it ?

Robert

[LCMember2041]

Hmmm, but palo probably wrong recognize. Log is: ms-update on port 8530

Robert

[HULK]

Hello Roberto,

For any existing application signature, you may look into this link ( search for existing application or port number): Application Research Center

Thanks

[LCMember2041]

I did not know that you can browse the port :smileyhappy: Thanks

Robert

[sgoethals]

It appears ports 8530 and 8531 have been removed again from app-id ms-sms as of 6/1/2018.

I contacted support and they confirmed this.  Unfortunately, they could not provide a reason why.  I ended up having to perform an application override for ms-sms to use ports 8530 and 8531 for my Windows Updates to work again. 

[ymiyashita]

It was fixed in content version 8036.