I've enabled web filtering (ASGv7) and it seems to be fiddling with the Ubuntu updates which are run from LAN hosts. It breaks the updates in many cases while Ubuntu apt is trying to fetch package headers. There are a number of well-known update repo servers and I've put them in the exception list in ASG in the following format, but still the problem remains.
Exception List (i.e. don't filter for requests to these external hosts)
.ubuntu.com
*.ubuntu.com
us.archive.ubuntu.com
*.archive.ubuntu.com
.getautomatix.com
*.getautomatix.com
.canonical.com
*.canonical.com
This thread was automatically locked due to age.