ESXI on Dmz & Update Manager

[santamaria]

Hi i am facing a issue, i have 6 esx servers vsphere 4 (4 esx & the vc & updatemanager) in the Lan & 2 ESXI in a DMZ, no problem to update the 4 ESX in the LAN, but the ESXI i the DMZ fail with "Scan Entity esxdmz1.xxx.xx Host cannot download files from VMware vCenter Update Manager patch store. Check the network connectivity and firewall setup, and check esxupdate logsfor details.virtualcenter VCENTER" it is clear some ports are missing but i did not find something clear.

If you can help

thanks Paul

[Petko Minkov]

Hi Paul,

I was wandering what could be DMZ.

One suggestion from me - why don't you try to stage the patches that you want to apply first. Right click on the DMZ hosts and open Stage wizard. It is created especially for the cases like yours - when you have working hosts over the Internet and want to minimize the patching downtime.

Check VUM - Configuration - Nework connectivity and Patch download settings

[santamaria]

Hello Thanks for your quick answer, DMZ was for servers in demillitarized zone, ok looks like i just need to open acces to the service console to the Internet and the ESXI will download them self the patches under VC supervision without using the internal datastore . i am right ?

thanks PAUL

[Petko Minkov]

Hi Paul,

ESX cannot download the patches itself. VUM downloads what is need to its repository and then sends the patches to ESX. Thank you for valuing my reply.

thanks,

Petko