My System administrators have asked me to poke a hole in my Firewall DMZ to allow our Exchange 2007 servers access to updates.microsoft.com. I am trying to find out what IP addresses and ports I should allow through.

Hello, I'm not 100% sure but I believe that Server initiates the conenction so that if your firewall uses stateful inspection then the firewall will open an incoming port based on the fact that the request was initiated from inside. Unless your firewall is configured with fixed-access ACL, tor you are specifically blocking outbount http or https, this part shoul not worry you. Use ports 80 and 443 for WSUS. Here is a list of the site you need to grant acces to: http://technet.microsoft.com/en-us/library/cc708602(WS.10).aspx Miguel Miguel Fra / Falcon ITS Computer & Network Support, Miami, FL Visit our Knowledgebase Sharepoint Site