Windows Insider Builds Download Trouble

Hi Ray,

Greetings.

How about you create a FQDN based Firewall Rule in XG, without any scanning and filter applied inside it.

The URL(s) to be defined in FQDN group will be:

• windowsupdate.microsoft.com
  
  
• http://*.windowsupdate.microsoft.com
  
  
• https://*.windowsupdate.microsoft.com
  
  
• http://*.update.microsoft.com
  
  
• https://*.update.microsoft.com
  
  
• http://*.windowsupdate.com
  
  
• download.windowsupdate.com
  
  
• http://download.microsoft.com
  
  
• http://*.download.windowsupdate.com
  
  
• test.stats.update.microsoft.com
  
  
• http://ntservicepack.microsoft.com

To create a FQDN Rule, select FQDN(host, group) in the "destination zone networks" while configuring a LAN to WAN Firewall Rule. PFA screenshot.

Hope that helps :)

Thanks

Sachin Gurung

Hi,

When i try to input the link (http://*.windowsupdate.microsoft.com)
in to the FQDN textbox as you mentioned it given "You must enter a valid value for FQDN" message.

That section don't accept the " * " symbol i think?

I am having the same issue... So sophos please share the correct way to do this!!

BTW this affects regular Windows Updates and Updates to Windows 10 as well.

Looks like it is working fine for now using just all the FQDNs without the http or *. before them.  Just create the group then add each one as a host to the group and you should be good to go.  Seems like creating a brand new rule for this is a bit excessive.  There should be a better way to make services exempt like there was in UTM9.

Looks like it is working fine for now using just all the FQDNs without the http or *. before them.  Just create the group then add each one as a host to the group and you should be good to go.  Seems like creating a brand new rule for this is a bit excessive.  There should be a better way to make services exempt like there was in UTM9.