Hi All,

 

I am going to be looking at reducing the Internet access a number of our servers currently have. Ideally limiting them to the bare minimum of connectivity. 

 

In terms of how this affects webroot clearly updates are likely to be a problem. Is there any solution available to deal with this? My initial thought is a proxy with Internet access to distribute the updates, a webroot WSUS basically.

 

If not, are there certain ports/urls etc that I can whitelist and at least heavily reduce connectivity rather than disable it all together.

 

Any suggestions on how to best tackle this would be great.