WSUS Offline patch update

Project assumptions

Microsoft has provided WSUS (Windows Server update Services) as a patch update solution for enterprise users. The idea of WSUS is that administrators use the WSUS server to download patches from Microsoft's Update website and then post them to intranet users. This can reduce network bandwidth flow, the amount of data downloaded by the patch to the lowest, and the patch under the control of the administrator, the administrator after the audit, agreed to release the patch, the user can install the patch. In some environments, however, the WSUS server is isolated from the outside world (Internet access is not available), in which case does the WSUS server achieve data synchronization?

Design ideas

Consider the method of importing and exporting WSUS data to resolve. By downloading the required updates on a WSUS server that can be networked, and then exporting the data, the exported data is imported to the WSUS server in the isolated network, so that data synchronization is implemented indirectly by the quarantined WSUS server.

Network topology

650) this.width=650; "title=" image "style=" border-right-width:0px;background-image:none;border-bottom-width:0px; padding-top:0px;padding-left:0px;padding-right:0px;border-top-width:0px; "border=" 0 "alt=" image "src=" http:// S3.51cto.com/wyfs02/m00/80/2c/wkiol1c6ipijvie3aaehnsqdg4m783.png "width=" 628 "height=" 422 "/>

Planning and Design

The data downloaded by the WSUS server consists of two parts, update files and meta-files.

The update files are stored in the folder and the meta-files are stored in the database. Import and export of updated files is easy to implement, copy the folder directly.

Import and export of meta-files can be done through a wsusutil.exe tool.

Therefore, the WSUS import export should include the following steps:

1. Ensure that the fast installation file and language settings of the source and destination servers match exactly

2. Import and export of updated files

3. Import and export of meta-files

Specific implementation:

Step 1 Import and export:matching advanced Options Step 2 Import and export:copying Updates from the File System Step 3 Import and export:copying Metadata from Database

HTTPS://TECHNET.MICROSOFT.COM/EN-US/LIBRARY/CC720512 (v=ws.10). aspx

WSUS Offline patch update