ZBF on 2811, MS update fail stop after several minutes

[gdapollo9]

ZBF on 2811 running 12.4.24 T3. Everything works great until the administrator attempts the downloads MS updates using Windows Update.  The updates will start out fine but after several minutes the download will slow to a crawl.  I have implemented this at a different site in a different countries with the same result which eliminates the ISP's network.  Any help would be appreciated?

Gary

[Maykol Rojas]

Hello Gary,

Thanks for posting. Have you confirmed that the Zone based firewall is the one causing the problem? Would you please enable the ip inspect log drop-pkt and identify if there is any packet being dropped from the microsoft servers?

I would like to know also what ports is being used by this MS update so if there is any inspection that may be causing a problem we can turn it off.

Let me know.

Mike