Most likely it is not an issue hitting a MS server but more likely a ZPM Feed.  Knowing what patches a PC needs only needs the Feed and not the vendor patch itself.  If the patch was shown as needed but could not download then it would be a FW issue to MS.  You also appear to only be looking for Disabled patches....

I would start with ZPM agent logs to confirm it is actually checking to see if patches are being detected as Needed, Not Needed, Installed, Not Installed, etc...

Could be DAU issue.....

And your Patches screenshot looks older....May want to confirm you are on 23.3 or 23.4 and actually on the new feed.

I'm not sure when it changed but does not look like any of my servers....though I do recall in the past it looked like that.

My ZCM Version is 23.4

and ZPM daily updat eis completed

But the patches in [security] page still show no patches, I had select [include disabled] patches 

I suspect you are on "Legacy Feed" still.  

There is currently some issues with the "Legacy Feed". (The Feed Vendor is working to resolve it.)

Look at your DAU Bundles....There should only be a single one for all Windows x64.  The Legacy feed has many different ones.

--

But here is the "New Feed" on 23.4 from the device perspective...Notice the area of your red box is different.

...

I Compare with legacy ZPM / advanced ZPM...they indeed has many different URLs.

but I has confused...forx example, base advacned ZPM URL list 

https://www.microfocus.com/documentation/zenworks-resources/ZPM_URLs.xlsx

for microsoft section...they need open no.176-no.202 , but no.182 hotfixv4.microsoft.com and no.183 localhostnt4w are unsolved.

these URLs are correct ?

Wencheng

They are correct as far as I know....But your screen shots look like ZCM 23.4 on Legacy Feed.  There are currently issues accessing on the Legacy Feed at the Feed Site that is being working on, though the Updated New Feed is fine.

I don't have an ETA as I'm not working on this issue directly with anyone....I know it's hot.

Hi

   Now I have transfer my ZPM lab to advanced ZPM so I am testing advanced ZPM function.

 could I ask 2 questions ?

base on https://www.microfocus.com/documentation/zenworks-resources/ZPM_URLs.xlsx

1. If I "Only" Manage Windows Patch...Whether I only create a firewall rule to open URLs which vendor is microsoft ? No177-No202

2. If I only scan windows patches...But other vendor patch information still show on patches...How could let other vendor patch exclude scan ?

Thanks!!

Wencheng

Patch Detection comes from the vendor feed so that is not controlled using FireWall Rules.

The actual patch install is what comes from the Vendors.  

So blocking Mozilla will not impact the ability to scan for Mozilla patches....It would only prevent ZCM from pulling the patch itself from Mozilla. 

That's true
What I see so far is that the Patch list will list relevant vendors that can be patched in the current environment (mirosoft/vmware/google.,..)...
But since I only allow the firewall to open No.176-No.202....only Microsoft patches can be downloaded (Pre-fetch Patch content) but other vendor patches cannot be downloaded.