WSUS Update Download fails with Event ID 364 in application log

[HotChilli]

Hello,

I'm hoping for some help on this one. I've had a WSUS server running for the
last 6 months with no problem. It serves and updates about 120 clients PC's
and 7 servers.

The server runs Windows 2003 Server SP1 with SQL Server 2000 SP4 and has
WSUS build 2.0.0.2472 installed.

Since the 28th January this year the server started refusing to download
updates. It would synchronise OK and now (17th March) shows "Stattus of
Downloads" of 38 updates needing files and Downloading 0.00 MB of 138.19 MB.

I have observed Event ID 364 in the event log with text:
"Content file download failed. Reason: The server returned an invalid or
unrecognized response
Source File:
/msdownload/update/v3-19990518/cabpool/windowsserver2003-kb901190-ia64-enu_567dfd2d7e4996dc6cd4e6bf662dda1b930e281a.exe
Destination File:
c:\OS_Updates\WsusContent\1A\567DFD2D7E4996DC6CD4E6BF662DDA1B930E281A.exe.
"

In the SoftwareDistribution.Log I have observed repeated errors with text:
2006-03-16 13:17:53.812
UTC Error wsusservice.168 ContentSyncAgent.JobError Download error:
http://au.download.windowsupdate.com/msdownload/update/v3-19990518/cabpool/windowsserver2003-kb901190-ia64-enu_567dfd2d7e4996dc6cd4e6bf662dda1b930e281a.exe
failed in download: (-2147012744) The server returned an invalid or
unrecognized response

at Microsoft.UpdateServices.ServerSync.ContentSyncAgent.JobError(Job,
JobError, JobFile)
at
Microsoft.UpdateServices.ServerSync.ContentSyncAgent.MonitorStatusThreadProc()

I interpret both of these as an error downloaing an update from the
microsoft web site. So I copied and pasted the URL into IE on the WSUS server
and the update completes with no problem.

I have verified that the NETWORK SERCIVE account has read access to the root
drive and write access to the WsusContent folder.

I have an authenticating proxy server on my gateway and I have verified that
the crendentials provided in the settgin page do actually work.

The only other related possible cause that I can think of is that I applied
SQL 2000 SP4 around the same time.

Any help is appreciated.

Andre Tomlinson
Network Administrator
All Saints Grammar School
www.allsaints.nsw.edu.au

[Arrington@discussions.microsoft.com Joe Arrington]

I was working on getting WSUS up and running at my workplace and never could
get the actual updates to download. It would sync OK but never get any
updates. Our problem turned out to be with a Symantec Security Gateway 5400
applicance we have in place here. Once we turned off "Antivirus comforting",
WSUS started downloading updates like a champ. So, if you have a firewall
appliance of anykind in place, look there for things that it could be doing
to block or hinder large downloads. Hope this helps.

Thanks,
Joe

[HotChilli]

Thanks Joe for your reply.

After closer examination, the issue is with BITS and my authenticating SQUID
proxy server. BITS doesn't send the user crendentials to the proxy correctly
and the downloads sit in the BITS queue with in a TRANSIENT ERROR state.

Since, I have disabled authentication (NTLM and Basic) on my SQUID proxy and
resumed the BITS jobs and the downloads are proceeding.

I'm looking for a way to exclude the download site from requiring
authentication at the proxy level as a permanent fix. or wait for a BITS
update.

Andre Tomlinson
All Saints Greek Orthodox Grammar School