Question : Symantec Antivirus Liveupdate in DMZ

What would be the best way to update a server in a DMZ. I have an IIS server that is not joined to the domain, running symantec antivirus corp. 10.0. Is it better to open port 80 outbound to the internet to retrieve updates, or open ports to the parent server on the inside network?

Answer : Symantec Antivirus Liveupdate in DMZ

I would recommend opening the appropiate ports on your IIS box then have your PARENT server retrieve DEFs from it.

The following links are the ports required per Symantec Version:
http://service1.symantec.com/SUPPORT/ent-security.nsf/docid/2005033011582148?Open&docid=2005090610104148&nsf=ent-security.nsf&view=0&seg=en&lg=en&ct=us

http://service1.symantec.com/SUPPORT/ent-security.nsf/docid/2002091816450048?Open&docid=2005090610104148&nsf=ent-security.nsf&view=0&seg=en&lg=en&ct=us

Hope this helps!