I am planning having 2 WSUS Servers but one in the DMZ to patch DMZ servers (Downstream-Replica) and the other in Internal network (Upstream)
I would like to use Replica mode option.Here are my questions
1. Can i patch all the DMZ servers in the DMZ using the downstream replica server or this is control from the Primary (upstream server)
2. Can i approve updates only in the Primary (upstream server) or either from the replica downstream server?
3. Confirm the following ports 8530 and 8531 is sufficent between upstream and downstream and all internal and dmz clients to the downstream servers.
Thanks