We manage the patching with SCCM, but hosting WSUS internally and pointing the DMZ servers to that is a valid approach as well.
Malcolm From: Eisenberg, Wayne [mailto:[email protected]] Sent: Wednesday, 17 December, 2008 10:30 To: NT System Admin Issues Subject: DMZ server patching Here's a quizzler for you: We have Windows servers living in a DMZ that is not allowed to have outbound web access (although there is connectivity to the internal network). How do you go about running patches on them? MS Updates won't work because there is no outbound web access allowed. Point them back to a WSUS server on the inside? Any other clever ways of getting patches to them besides just manually copying them from another computer and running them manually? Thanks, Wayne This e-mail, including any attached files, may contain confidential and privileged information for the sole use of the intended recipient. Any review, use, distribution, or disclosure by others is strictly prohibited. If you are not the intended recipient (or authorized to receive information for the intended recipient), please contact the sender by reply e-mail and delete all copies of this message. ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~
