Microsoft Office 2019 updates keep on failing with error 30088-28 (416)

first question would be: it this working when the computer is not behing XG firewall?

please post a webfilter logfile of that computer that contains a download attempt of that computer(s).

Hi,

I managed to get help directly from Sophos support to resolve this. It seems that i had to add more than 90 wildcard type of URLs in the the exception list by following the instructions given at the below KBA for same:

Sophos Firewall: Configure web exceptions for Office 365

I'd think this should be enough for normal WU.

• ^([A-Za-z0-9.-]*\.)?ntservicepack\.microsoft\.com/
• ^([A-Za-z0-9.-]*\.)?emdl\.ws\.microsoft\.com/
• ^([A-Za-z0-9.-]*\.)?dl\.delivery\.mp\.microsoft\.com/
• ^([A-Za-z0-9.-]*\.)?windowsupdate\.microsoft\.com/
• ^([A-Za-z0-9.-]*\.)?update\.microsoft\.com/
• ^([A-Za-z0-9.-]*\.)?wustat\.microsoft\.com/
• ^([A-Za-z0-9.-]*\.)?windowsupdate\.com/
• ^([A-Za-z0-9.-]*\.)?crl\.microsoft\.com/
• ^([A-Za-z0-9.-]*\.)?download\.microsoft\.com/
• ^([A-Za-z0-9.-]*\.)?go\.microsoft\.com/

Do you use Office 365?

I'd think this should be enough for normal WU.

• ^([A-Za-z0-9.-]*\.)?ntservicepack\.microsoft\.com/
• ^([A-Za-z0-9.-]*\.)?emdl\.ws\.microsoft\.com/
• ^([A-Za-z0-9.-]*\.)?dl\.delivery\.mp\.microsoft\.com/
• ^([A-Za-z0-9.-]*\.)?windowsupdate\.microsoft\.com/
• ^([A-Za-z0-9.-]*\.)?update\.microsoft\.com/
• ^([A-Za-z0-9.-]*\.)?wustat\.microsoft\.com/
• ^([A-Za-z0-9.-]*\.)?windowsupdate\.com/
• ^([A-Za-z0-9.-]*\.)?crl\.microsoft\.com/
• ^([A-Za-z0-9.-]*\.)?download\.microsoft\.com/
• ^([A-Za-z0-9.-]*\.)?go\.microsoft\.com/

Do you use Office 365?

Yes i do use both Office 365 and 2019. My initial question is directly related to issues on inability to download Office updates. 

and did you find out, which URLs are accessed by your clients when they download Office updates? This may be helpful for others.

All URLs are listed at Sophos Firewall: Configure web exceptions for Office 365