Unblocking Windows Update
Hi,
I'm really struggling to unblock Windows Update through a default block rule. I'm trying to achieve this using only an access rule but still getting policy dropped packets.
I've unblocked all of these FQDNs, am I missing some? I've been over the documentation for Windows Update many times and can't see anything missing tbh.
update.microsoft.com
windowsupdate.microsoft.com
download.windowsupdate.com
wustat.windows.com
ntservicepack.microsoft.com
go.microsoft.com
dl.delivery.mp.microsoft.com
download.microsoft.com
*.windowsupdate.microsoft.com
*.update.microsoft.com
*.windowsupdate.com
*.download.windowsupdate.com
I've not messed around with things like App Control yet so would prefer to get this working with an access rule but if App Control is best for getting around a Default Block access rule for stuff like Windows Update then I may have to do some research on it
Is there some kind of limitation to the number of IP addresses that it will resolve an FQDN to or something which might be causing issues?
Thanks,
Answers
Show us a sanitized screenshot of your access rules?