It's likely that IPS or Surf Protection is blocking content that it thinks is bad. There have been numerous reports of this happening in v7 where it didn't in v6.
You might want to verify that the default exception rules are in place, for windows update to work correctly. It can be found in web security ->http -> exceptions and lists microsofts sites with exceptions for virus scanning and extensions blocking.
