topic Allow to Windows Update in Firewall and Security Management

Allow to Windows Update

handiansudianto — Mon, 15 Jul 2024 05:13:16 GMT

Hello,

Anyone know how to make an rule to allowing to windows update only?

Re: Allow to Windows Update

G_W_Albrecht — Mon, 15 Jul 2024 06:49:04 GMT

See https://support.checkpoint.com/results/sk/sk131852 and https://community.checkpoint.com/t5/Security-Gateways/Can-t-Connect-To-Windows-Update/m-p/189906#M35009

Re: Allow to Windows Update

Lesley — Mon, 15 Jul 2024 19:49:33 GMT

Follow this and there is indeed a 'Windows Update" object for the application blade.

All apps you can find here:

https://appwiki.checkpoint.com/appwikisdb/public.htm?_gl=1*1pm31fk*_gcl_au*NDgwNjg0MzQzLjE3MTMzNzk5MTU.

Note that Windows Update is bypassed general speaking from HTTPS inspection (if you run this).

For other 365 Services HTTPS inspection is required because it is URL bases services.

Re: Allow to Windows Update

the_rock — Mon, 15 Jul 2024 19:52:44 GMT

ssl inspection enabled?

Andy

Re: Allow to Windows Update

Lesley — Mon, 15 Jul 2024 20:38:22 GMT

Don't think that will be needed 🙂

(Part 3 - 3) Additional Information: Update Services

Update services (such as Microsoft updates) are implicitly bypassed in the HTTPS Inspection rulebase.

https://support.checkpoint.com/results/sk/sk108202

Re: Allow to Windows Update

handiansudianto — Tue, 16 Jul 2024 04:06:05 GMT

Hi All,

Already solved by add all windows and windows updatable object.