Scenario: The client has pretty standard ConfigMgr setup to manage there primary and dev systems. The clients communicate to Distribution and Management Points however, the PORT 8530 from the Software update Point ( SRVSUP01 ) can not be opened to clients in the dev vlan. Without getting into the technical architecture of the configured firewall rules a second Software update Point would be required to over come this architectural design. However, the Dev client would not switch over to the new SUP ( SRVSUP02) . Upon opening a Browser window from a Dev client it was possible to navigate to the addresses below thus confirming the availability of the new SUP. http:// SRVSUP02 .Contoso.local :8530/SimpleAuthWebService/SimpleAuth.asmx http:// SRVSUP02 .Contoso.local :8530/ClientWebService/wusserverversion.xml http:// SRVSUP02 .Contoso.local :8530/Selfupdate/wuident.cab The WUAHandler.log was reporting a scan failure error code: 0x8024401c. Implying the Scan agent was not ...