I have a question about WSUS approvals and updates.
I am running WSUS on Server 2012 R2. I have configured WSUS to store the updates locally, and download only when they are approved. On my other servers, when I check for updates, they see the approvals, but won’t download the files.
We have made some recent changes to the network and WSUS. We have blocked outbound ports on our other servers on all ports; however, these servers and WSUS are on the same VLAN and there is nothing blocking communication between them. It was after we blocked these ports that I then configured our WSUS server to download the updates. I thought that the clients would then download the files from WSUS, but our Network Admin says that we can see the clients still trying to connect to Microsoft IPs when I check for updates. So, do the clients still need to download something from Windows Update, even though the approvals and files are on my WSUS server? The updates that I have approved have finished downloading on the WSUS server (or at least the message saying “the files have not yet been downloaded” has disappeared).
Thanks