PENDING Setting up Distribution point for software updates on a Site Server

[hcuk]

Good afternoon,

We are in the process of setting up a secondary distribution point for our servers in an isolated environment which has no access to the internet. The new dp/mp traffic is restricted to Primary site. We've allowed ports TCP 10123, 8530, 8531, 443, 80 to the Primary Site. The clients in the isolated network will have the same rules to the new DP/MP.

I have installed the Management Point and Distribution Point roles to the Site System server. The clients in the isolated environment are receiving application deployments but are not receiving software updates. I have distributed the software update deployment packages to the Distribution point but I am still unable to see the updates in software center. Does the site server also require the Software Updates Role to be able to push updates to the clients?

I have included screenshots of the following logs, WUAHandler and the UpdatesDeployment. If these are not enough, please let me know.

Thank you so much in advance.

P.S. This forum is amazing for troubleshooting my issues.

 

[Garth]

those port do not cover all of the ports needed for the dp. https://learn.microsoft.com/en-us/mem/configmgr/core/plan-design/hierarchy/ports

 

[hcuk]

those port do not cover all of the ports needed for the dp. https://learn.microsoft.com/en-us/mem/configmgr/core/plan-design/hierarchy/ports

Thanks for the response. I reviewed the document, I can't find what other ports I am missing for the clients to receive updates from a DP. Sorry, can you point me to the right direction? I also reviewed it here as well.

 

[Garth]

you mean you can't see section that says from site server to dp?

 

[hcuk]

my apologies. Port 135 tcp/udp and tcp 445 are allowed as well.

Does the DP require the software update point to deploy the Software Updates. Or is deploying the SUG to the DP enough?

 

[Garth]

my apologies. Port 135 tcp/udp and tcp 445 are allowed as well.

Does the DP require the software update point to deploy the Software Updates. Or is deploying the SUG to the DP enough?

And the rpc ports.... To deploy no, to scan you need to be able to access a sup.

 

[hcuk]

The issue was that the management point role didn't install correctly. BITS role was not installed on the server. After installing the BITS role the management point role installed and was able to start listening on port 10123. Thanks for your help Garth.