Detailed Import Patch Management for Windows access to SolutionSam and Vendor Download Sites

book

Article ID: 150321

calendar_today

Updated On:

Products

Patch Management Solution for Windows

Issue/Introduction

PM Imports may now fail, or you need to know information for whitelisting the Patch Management Import (PM Import) process.

NOTE: There IP address changed on June 4, 2021 as noted below

Certain updates from vendors or all updates from some vendors fail to download.

 

Please note the changes that may affect you in the article Patch Metadata Import HTTPs Support for 8.1.x and 8.5.x

 

Cause

For PMImport, this may be caused by recent changes to the storage location for the PM Import data files (i.e. whitelisting by IP address)

For update download issues, this is caused by one or more network configurations (i.e. firewall, proxy, security software, etc)

Resolution

The Import Patch Management for Windows (PMImport) data location recently changed from an Akamai Server Farm, which managed the download of the primary cab and associated files. The default URL has not changed (http://www.solutionsam.com/imports/7_1/patch/windows/pmimport.cab), but whitelisting by IP addresses is now possible.

NOTE: This IP Address will changed to 192.19.192.79 on June 4, 2021

Advisory: The Symantec Management Platform (SMP) Server uses Anonymous Authentication (IUSR) when calling the PMImport download and when downloading Software Bulletins from vendors to the SMP Server.

The targeted sites do not recognize any local SMP Server's specific User Credentials and a specific User Credential is not called on the scheduled process. The System Account (Anonymous) is going to need to have clearance through network security from the SMP Server to the specified Vendor Sites. 

Note: If the Admin account is able to hit the URL in a browser; this shows that their account has permissions for their user credentials to access the SolutionSam site or URL for downloading the Software Update.