Hello, I would like to know if there is documentation available indicating which URL or port is used by the Windows Update Agent (WUA) on Windows machines to report to Microsoft Update for patching / updating the OS. VM Extension Azure Arc Server Extension Windows Microsoft.CPlat.Core.WindowsPatchExtension Windows Microsoft.CPlat.Core.WindowsPatchExtension (Periodic assessment) Thank you.

Hi @Yuk Leong Chow Thank you for reaching out to the Microsoft Q&A platform Communication between Windows Update agent and Microsoft servers occurs over HTTP or HTTPS over port 80 and 443. If you are using the update management, you can to the connectivity checks by following this document https://learn.microsoft.com/en-us/azure/automation/troubleshoot/update-agent-issues#connectivity-checks Reference for communication issues and debugging guide https://learn.microsoft.com/en-us/azure/automation/troubleshoot/update-management#machine-unable-to-communicate This below highlighted section of the document has the information above prerequisite URLs. and Port details documented, other than this i didn't find it elsewhere mentioned about the URLs and ports. Please click "Accept as answer" if this helps

How to determine the necessary URL and port to whitelist for Azure Update Manager patching?

Yuk Leong Chow 5

Hello,

I would like to know if there is documentation available indicating which URL or port is used by the Windows Update Agent (WUA) on Windows machines to report to Microsoft Update for patching / updating the OS.

VM Extension	Azure Arc Server Extension
Windows Microsoft.CPlat.Core.WindowsPatchExtension	Windows Microsoft.CPlat.Core.WindowsPatchExtension (Periodic assessment)

Thank you.

Yuk Leong Chow 5 Reputation points

2023-11-14T10:57:00.7533333+00:00

I miss some information,

Windows Microsoft.CPlat.Core.WindowsPatchExtension (Periodic assessment)Microsoft.SoftwareUpdateManagement.WindowsOsUpdateExtension (On-demand operations and Schedule patching)
Nikhil Mengaram 25 Reputation points Microsoft Employee

2023-11-14T17:57:53.8466667+00:00
Hi Yuk Leong Chow,

Extension gets installed using Azure Windows Agent, and hence pre-reqs mentioned here needs to be met. https://learn.microsoft.com/en-us/azure/virtual-machines/extensions/agent-windows#prerequisites

It uses WU/WSUS agent to fetch and install updates. This article should be helpful in knowing ports/URLs https://learn.microsoft.com/en-us/windows-server/administration/windows-server-update-services/deploy/2-configure-wsus

2 answers

Prrudram-MSFT 24,561 Reputation points

2023-11-14T12:43:39.61+00:00

Hi @Yuk Leong Chow

Thank you for reaching out to the Microsoft Q&A platform

Communication between Windows Update agent and Microsoft servers occurs over HTTP or HTTPS over port 80 and 443. If you are using the update management, you can to the connectivity checks by following this document https://learn.microsoft.com/en-us/azure/automation/troubleshoot/update-agent-issues#connectivity-checks

Reference for communication issues and debugging guide https://learn.microsoft.com/en-us/azure/automation/troubleshoot/update-management#machine-unable-to-communicate

This below highlighted section of the document has the information above prerequisite URLs. and Port details documented, other than this i didn't find it elsewhere mentioned about the URLs and ports.

Please click "Accept as answer" if this helps
Please sign in to rate this answer.
Yuk Leong Chow 5 Reputation points

2023-11-14T13:40:14.98+00:00

Communication between Windows Update agent and Microsoft servers occurs over HTTP or HTTPS over port 80 and 443, do we have the documents that written this information, need solid proof. And what need ports need to whitelist

Yuk Leong Chow 5 Reputation points

2023-11-14T13:46:27.42+00:00

I type wrong not port, is URL

Prrudram-MSFT 24,561 Reputation points

2023-11-14T15:23:52.89+00:00

Yuk Leong Chow

We noticed that you rated an answer as not helpful. I have added more details in my answer with the relevant details to make this a positive experience for you. Thanks!

We value your feedback. If my answer is helpful, would you be so kind to re-evaluate your feedback, accept my answer and upvote the same please?

Yuk Leong Chow 5 Reputation points

2023-11-14T23:32:57.77+00:00

Communication between Windows Update agent and Microsoft servers, Can i have solid prove. I using azure update manager , not automation account

Prrudram-MSFT 24,561 Reputation points

2023-12-12T19:55:08.0633333+00:00

Yuk Leong Chow

As suggested by sam goudie. For update Manager this is covered here https://learn.microsoft.com/en-us/azure/update-manager/overview?tabs=azure-vms#network-planning

We value your feedback. If an answer is helpful, would you be so kind to re-evaluate your feedback, accept an answer and upvote the same please?
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.

sam goudie 0 Microsoft Employee

Port and URL for Azure update management are covered here - https://learn.microsoft.com/en-us/azure/automation/automation-network-configuration#update-management-and-change-tracking-and-inventory

Yuk Leong Chow 5 Reputation points

2023-11-14T23:16:28.5566667+00:00

the information is azure automation account not azure update manager

sam goudie 0 Microsoft Employee

For update Manager this is covered here https://learn.microsoft.com/en-us/azure/update-manager/overview?tabs=azure-vms#network-planning


TLS 1.2	`*.prod.do.dsp.mp.microsoft.com`
HTTP	`emdl.ws.microsoft.com`
HTTP	`*.dl.delivery.mp.microsoft.com`
HTTP	`*.windowsupdate.com`
HTTPS	`*.delivery.mp.microsoft.com`
TLS 1.2	`*.update.microsoft.com`
TLS 1.2	`tsfe.trafficshaping.dsp.mp.microsoft.com`

https://learn.microsoft.com/en-us/troubleshoot/windows-client/deployment/windows-update-issues-troubleshooting?toc=%2Fwindows%2Fdeployment%2Ftoc.json&bc=%2Fwindows%2Fdeployment%2Fbreadcrumb%2Ftoc.json#device-cant-access-update-files

Share via

How to determine the necessary URL and port to whitelist for Azure Update Manager patching?

2 answers

Your answer