Full internet access needed from isolated network

Availability for the Always-On Enterprise

Full internet access needed from isolated network

Veeam Logoby kroerig » Fri Oct 27, 2017 3:25 pm


I have a serious problem.

Our Windows Server 2012 R2 with MS Exchange on it refuses to install Windows Updates. I need to repair it using DSIM-Tool, which needs full internet access to download repair components from MS servers.

To not destroy the working Exchange installation I want to try the repair steps in a virtuel lab before doing them on the production system. But DISM always stucks on 40% telling me that it cannot download the needed packages.

I tried setting a proxy in winhttp, but it does not work. I think I need full internet access from my virtual lab. How can I achieve this?

We also thought of appling and testing update of other software in a vLab before installing them on production system, but we have many software that cannot uses proxies and/or the update client cannot use it.

What about implementing a transparent proxy in the ProxyVM or simply make it possible to enable a full NAT?

Posts: 7
Liked: never
Joined: Tue Nov 11, 2014 10:45 am
Full Name: Klaus Rörig

Re: Full internet access needed from isolated network

Veeam Logoby DGrinev » Tue Oct 31, 2017 3:35 pm

Hi Klaus,

Sorry for delayed reply.
You cannot switch it to a full unrestricted internet access.
Internet access within the virtual lab was allowed only for http(s) connections (ports 80/443 only), so for the Windows updates that should be enough to pass the limitation.
You can spin up a VM by instant VM recovery, assign it to another VLAN (different from the production) and try to run Windows update. You will find out whether the issue related to the Updater or VLab. Thanks!
Veeam Software
Posts: 1026
Liked: 108 times
Joined: Thu Dec 01, 2016 3:49 pm
Full Name: Dmitry Grinev

Return to Veeam Backup & Replication

Who is online

Users browsing this forum: dcheung, Google [Bot] and 65 guests