List of Domains for Whitelisting when Using Patch My PC’s Catalog

When updates are published using full-content from our third-party software update catalog for SCCM, the service will need to download content files from the vendor’s website. You only need to allow traffic to the domains for products that you choose to publish with full-content.

If user-agent filters are in place, you need to allow “Patch My PC Publishing Service*” for the publishing service’s user agent.

Topics covered in this article:

• Review Download Failures from Firewall Rules for Previous Synchronizations
• List of Domains Always Required
• List of Domains for Update Content (Based on Products Enabled for Published)
• Deep Dive Into Security Validation of Updates and Applications

Review Download Failures from Firewall Rules for Previous Synchronizations

In addition to the full list of domains provided below, we also store the last download response code and domain for currently enabled products. This can be helpful when reviewing download failures for currently enabled products.

The download history can be found on a CSV file in: %InstallDir%\PatchMyPC-DownloadHistory.csv

Here’s an example of the data included in the PatchMyPC-DownloadHistory.csv file. You can use the domain column to create firewall exceptions based on the products enabled and failing to download.

List of Domains Always Required

List of Domains for Update Content (Based on Products Enabled for Published)

You can also download a .CSV file with the list of possible domains, ports, and protocols that would need to be whitelisted.

• Firewall whitelist for Patch My PC catalog (last updated: September 10, 2020)

Last Update: April 30, 2020

Keywords: whitelist, firewall, exceptions, filter, filters