.. _windows-update-configuration:

Windows operating system update environment
==============================================

 Windows Update feature provided by Genian |product_name|, you must set up an environment that performs updates in advance.

 Please see :ref:`windows-update` for the part where Windows operating system updates are applied to your device. (Agent action is required)

Windows operating system update preferences(Check for Updates from)
--------------------------------------------------------------------------

#. Go to **preferences** in the top panel
#. Go to **General > Agent > OS Update** in the left panel
#. Set **Windows update** items to suit your environment.

Setup the Windows Update "Check for Updates from"
'''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''

The Windows operating system update preferences are divided into the search method for update files and the connection method to the update server provided by Mircosoft.
Depending on your network environment, you can change how you search and connect.

#. **Mircosoft Windows Update** : How to communicate with the Mircosoft-provided update server connected to the public network (Internet)
#. **WSUS** : How to communicate with WSUS servers connected to private networks
#. **Offline Scan File** : How to communicate with the Genian |product_name| policy server connected to a private network.

.. list-table::
   :widths: 3 3 8
   :header-rows: 1


   * - Check for Updates from
     - Download from
     - Firewall
   * - Mircosoft Windows Update
     - Mircosoft / WSUS
     - Allow all devices to communicate with the MS Update server
   * - 
     - Genian NAC (Download Only)
     - Allow all devices to communicate with the MS Update server
   * - 
     - Genian NAC (Check + Download)
     - Allow communication with MS Update server on |product_name| Device
   * - WSUS
     - Microsoft / WSUS
     - Allow all devices to communicate with the WSUS
   * - 
     - Genian NAC (Download Only)
     - Allow all devices to communicate with the WSUS
   * - 
     - Genian NAC (Check + Download)
     - Allow communication with WSUS on |product_name| Device
   * - Local Repository
     - 
     - Setting up in an environment where you cannot communicate with the Public network

Configure Proxy Server
''''''''''''''''''''''''

**Download from** when the operating system updates, it can be set only when *Genian NAC* is used.

Used when the firewall cannot grant permission to both Genian |product_name| devices.

.. note:: Perform external network connection with the server IP set up at Proxy server setup.


Proxy Server Exceptions
'''''''''''''''''''''''''

set up a domain that allows you to perform operating system updates on targets whose networks are blocked by Genian |product_name|.