Block Windows Update for all computers except specific IP

Question

How do I block all the computer from windows update in Sophos xg?

lferrara · Answer

Inspace, 
 use this link: 
 https://community.sophos.com/kb/en-us/123833 
 Regards

FormerMember · Answer

Hi, 
 If you want to block Windows Update you can do that with Application Control policy. You simply need to create Application Control policy with Windows Update selected with action Deny. Now you can select this new policy in firewall rule. If you want to allow Windows Updates on specific devices, you need firewall rule above based on source IP addresses of the devices that want to allow Windows Update.

Thanks,