I have a secondary server with the MP / SUP roles assigned and there is a firewall between this server and the primary server, where port 80 is being blocked. All SUP installs have been setup for port 8530. The secondary can successfully sync the patch catalogue from the primary but the clients are failing to initiate a patch scan. I can successfully kick the scan via the Configuration Management applet but the WUAHandler.log does not get updated. The HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate registry keys are not getting populated with any server information as well.
There is no GPO settings in place for Updates.
Please advise if the workstations need to contact the primary server so SCCM_SUP Scanning will work and if there's anyway we can get around that.
Jason