Answer

PROBLEM

ENVIRONMENT

• GFI MailEssentials
• All supported environments

SOLUTION

1. On the GFI MailEssentials machine open the Command Prompt
2. Type nslookup and press Enter
3. Type update.gfi.com and see that this gets resolved

• Create Destination Set

1. In ISA Management, change to Policy Elements > Destination Sets
2. Right click and select New Set
3. Give the new set a name (e.g. Gfi.com destination set)
4. Click Add, and insert *.gfi.com and *.gfisoftware.com
5. Click OK when finished

• Create Client Address Set

1. In ISA Management, change to Policy Elements > Client Address Sets
2. Right click and select New Client Address Set
3. Give the Address set a name (e.g. the GFI MailEssentials for Exchange/SMTP machine)
4. Click Add and enter the IP address of the machine
5. Click OK when finished

• Create a Site and Content Rule

1. In Microsoft ISA Management, change to Access Policy > Site and Content Rules
2. Right click and select New > Rule
3. Provide a name for the new rule (e.g. Allow automatic downloading of definition files from GFI.com) and click Next
4. In the Rule Action window, select Allow and click Next
5. In the Rule Configuration window, select Custom and click Next
6. In the Destination Sets window, select Specified Destination Set and choose the Destination Set created in A (Gfi.com destination set ) and click Next
7. In the Schedule window, select Always and click Next
8. In the Client Type window, select Specific Address Sets and click Next
9. In the Client Address Sets window, click Add and select the Address Set created in B (MailEssentials machine) and click Next
10. In the Content Groups window, select Any Content and click Next
11. Click Finish

1. Open ISA Server Management > Firewall Policy and choose Create New Access Rule and in the rule name box enter MailEssentials 2012 and click Next 
2. In the Rule Action Window select Allow and click Next
3. In Protocols Window choose Selected Protocols and add HTTP found under All Protocols > click Next
   • If GFI MailEssentials is installed on the same machine as ISA server, in the Access Rule Sources window click Add , expand Networks and select Local Host . Click Add followed by Close , then click Next
   • If GFI MailEssentials is installed on a separate machine, in the Access Rule Sources window click Add then click on New followed by Computer and enter a name to refer to the GFI MailSecurity computer. Fill in the IP address for the GFI MailSecurity machine. Click OK and Add the newly created Computer found under Computers
4. In the Access Rule Destinations window click Add . Click New and select URL Set and name it GFI updates. 
5. Click New and enter http://*.gfi.com. Click New again and enter http://*.gfisoftware.com. Click OK.
6. Select the newly created URL set named GFI Updates found under URL Sets and click Add
7. Click Close and then click Next
8. In the User Sets Window make sure that you have All Users listed
9. Click Next and then click Finish
10. Ensure that you set the priority of the Access Rule created in such a manner that no other rule overrides it. Apply the changes to the ISA Server Configuration.

CAUSE