Full internet access needed from isolated network

[kroerig]

Hello,

I have a serious problem.

Our Windows Server 2012 R2 with MS Exchange on it refuses to install Windows Updates. I need to repair it using DSIM-Tool, which needs full internet access to download repair components from MS servers.

To not destroy the working Exchange installation I want to try the repair steps in a virtuel lab before doing them on the production system. But DISM always stucks on 40% telling me that it cannot download the needed packages.

I tried setting a proxy in winhttp, but it does not work. I think I need full internet access from my virtual lab. How can I achieve this?

We also thought of appling and testing update of other software in a vLab before installing them on production system, but we have many software that cannot uses proxies and/or the update client cannot use it.

What about implementing a transparent proxy in the ProxyVM or simply make it possible to enable a full NAT?

Klaus

[DGrinev]

Hi Klaus,

Sorry for delayed reply.
You cannot switch it to a full unrestricted internet access.
Internet access within the virtual lab was allowed only for http(s) connections (ports 80/443 only), so for the Windows updates that should be enough to pass the limitation.
You can spin up a VM by instant VM recovery, assign it to another VLAN (different from the production) and try to run Windows update. You will find out whether the issue related to the Updater or VLab. Thanks!