Internet Firewall Requirements

There are 3 Internet Firewall configuration issues to consider when having download problems with UpdateEXPERT:

URL Filtering
File type Filtering
Browser type Filtering

URL Filtering

The Internet Firewall(s) must not block specific UpdateEXPERT Premium URL requests on port 80 so that UpdateEXPERT Premium can successfully download product updates, patch database updates, Microsoft and Unix patches, and security templates for the SecurityEXPERT (settings management) component. Firewall(s) between the Master-Agent and Internet must allow the following URLs:

If your proxy/firewall performs reverse lookups (typically for better internal security), you must also allow the following URL:

An alternative to allowing the specific St. Bernard Software URLs above is to broaden the allowed URL specification to:

... where anything means any prefix in front of ".stbernard.com".  In this case, you are allowing communication to any/all St. Bernard Software servers for purposes of downloading product updates, patches, and security templates. Note that broadening this URL specification may protect against possible St. Bernard Software server configuration changes or additions over time. This may be beneficial not only for UpdateEXPERT Premium, but for a multi-product environment that may also include ePrism mail filtering and iPrism URL filtering appliances.   

File & Browser Types

Also, be aware that file type filtering and/or browser type filtering may hinder UpdateEXPERT database/product update downloads. While not often a problem, it is an issue to be aware of. See:

File type filtering on a firewall can hinder UpdateEXPERT updates

Browser type filtering on a firewall can hinder UpdateEXPERT updates