A Content file download failed (Event ID 364) Error is Shown on the Microsoft WSUS Server Behind th

A Content file download failed (Event ID 364) Error is Shown on the Microsoft WSUS Server Behind the SonicWALL

Resolution for SonicOS 6.5

This release includes significant user interface changes and many new features that are different from the SonicOS 6.2 and earlier firmware. The below resolution is for customers using SonicOS 6.5 firmware.

You see the following Microsoft Windows Server Update Services (WSUS) error message on server computers behind a SonicWall firewall appliance:

Event ID: 364 - Content file download failed. Reason: The server does not support the necessary HTTP protocol. Background Intelligent Transfer Service (BITS) requires that the server support the Range protocol header.

See the Microsoft Knowledge Base article entitled Error message when you try to download a file by using the Background Intelligent Transfer Service: "Content file download failed" for additional information on this error condition.

This issue is resolved by adding the IP address of the WSUS server to the SonicWall Gateway Anti-Virus and Anti-Spyware services exclusion list.

Gateway Anti-Spyware:

1. Select  Manage | Security Services | Anti-Spyware.
2. Click Configure Anti-Spyware Settings in the Anti-Spyware Global Settings section.
3. In the Anti-Spyware Exclusion List section, click the Enable Anti-Spyware Exclusion List checkbox.
4. Click the Add button. The Add Anti-Spyware Range Entry window is displayed.
5. Enter the IP address of the WSUS server in the IP Address From and IP Address To fields, then click OK. Your IP address range appears in the Anti-Spyware Exclusion List table. Click the edit icon in the Configure column to change an entry or click the delete (Trashcan) icon to delete an entry.

Gateway Anti-Virus:

1. Select Manage |  Security Services | Gateway Anti-Virus.
2. Click the Configure Gateway AV Settings button.
3. Click the Enable Gateway AV Exclusion List checkbox.
4. Click the Add button. The Add GAV Range Entry window is displayed.
5. Enter the IP address of the WSUS server in the IP Address From and IP Address To fields, then click OK. Your IP address range appears in the Gateway AV Exclusion List table. Click the edit icon in the Configure column to change an entry or click the trashcan icon to delete an entry.
6. Click OK.

Resolution for SonicOS 6.2 and Below

The below resolution is for customers using SonicOS 6.2 and earlier firmware. For firewalls that are generation 6 and newer we suggest to upgrade to the latest general release of SonicOS 6.5 firmware.

You see the following Microsoft Windows Server Update Services (WSUS) error message on server computers behind a SonicWall firewall appliance:

Event ID: 364 - Content file download failed. Reason: The server does not support the necessary HTTP protocol. Background Intelligent Transfer Service (BITS) requires that the server support the Range protocol header.

See the Microsoft Knowledge Base article entitled Error message when you try to download a file by using the Background Intelligent Transfer Service: "Content file download failed" for additional information on this error condition.

This issue is resolved by adding the IP address of the WSUS server to the SonicWall Gateway Anti-Virus and Anti-Spyware services exclusion list.

Gateway Anti-Spyware:

1. Select Security Services > Anti-Spyware.
2. Click Configure Anti-Spyware Settings in the Anti-Spyware Global Settings section.
3. In the Anti-Spyware Exclusion List section, click the Enable Anti-Spyware Exclusion List checkbox.
4. Click the Add button. The Add Anti-Spyware Range Entry window is displayed.
5. Enter the IP address of the WSUS server in the IP Address From and IP Address To fields, then click OK. Your IP address range appears in the Anti-Spyware Exclusion List table. Click the edit icon in the Configure column to change an entry or click the delete (Trashcan) icon to delete an entry.

Gateway Anti-Virus:

1. Select Security Services > Gateway Anti-Virus.
2. Click the Configure Gateway AV Settings button.
3. Click the Enable Gateway AV Exclusion List checkbox.
4. Click the Add button. The Add GAV Range Entry window is displayed.
5. Enter the IP address of the WSUS server in the IP Address From and IP Address To fields, then click OK. Your IP address range appears in the Gateway AV Exclusion List table. Click the edit icon in the Configure column to change an entry or click the trashcan icon to delete an entry.
6. Click OK.