Availability for the Always-On Enterprise
Post Reply
Posts: 7
Liked: never
Joined: Nov 11, 2014 10:45 am
Full Name: Klaus Rörig

Full internet access needed from isolated network

Post by kroerig » Oct 27, 2017 3:25 pm


I have a serious problem.

Our Windows Server 2012 R2 with MS Exchange on it refuses to install Windows Updates. I need to repair it using DSIM-Tool, which needs full internet access to download repair components from MS servers.

To not destroy the working Exchange installation I want to try the repair steps in a virtuel lab before doing them on the production system. But DISM always stucks on 40% telling me that it cannot download the needed packages.

I tried setting a proxy in winhttp, but it does not work. I think I need full internet access from my virtual lab. How can I achieve this?

We also thought of appling and testing update of other software in a vLab before installing them on production system, but we have many software that cannot uses proxies and/or the update client cannot use it.

What about implementing a transparent proxy in the ProxyVM or simply make it possible to enable a full NAT?


Veeam Software
Posts: 1221
Liked: 129 times
Joined: Dec 01, 2016 3:49 pm
Full Name: Dmitry Grinev
Location: St.Petersburg

Re: Full internet access needed from isolated network

Post by DGrinev » Oct 31, 2017 3:35 pm

Hi Klaus,

Sorry for delayed reply.
You cannot switch it to a full unrestricted internet access.
Internet access within the virtual lab was allowed only for http(s) connections (ports 80/443 only), so for the Windows updates that should be enough to pass the limitation.
You can spin up a VM by instant VM recovery, assign it to another VLAN (different from the production) and try to run Windows update. You will find out whether the issue related to the Updater or VLab. Thanks!

Post Reply

Who is online

Users browsing this forum: Baidu [Spider], Bing [Bot] and 55 guests