https://community.checkpoint.com/t5/Firewall-and-Security-Management/Allow-to-Windows-Update/m-p/190547#M67621 <P>Do you have Application Control and URL Filtering enabled?</P> Fri, 25 Aug 2023 06:40:55 GMT _Val_ 2023-08-25T06:40:55Z https://community.checkpoint.com/t5/Firewall-and-Security-Management/Allow-to-Windows-Update/m-p/190217#M67620 <P>Hello,</P><P>&nbsp;</P><P>I required to block some windows group from accessing to the internet but only allow to microsoft update.</P><P>I can see on the application with name 'Windows Update' and in the Network Policy i can't select this application.</P><P>On my mind is i must create an application rule to allowing desired windows group to this application, but what should we do for this group on network policy?</P><P>Only using this application rule, the server is not able to connect to the windows update.</P><P>If i make network rule for this group with destination set to 'Any' all host under this group is able to access to the internet.</P><P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="cp9.JPG" style="width: 685px;"><img src="https://community.checkpoint.com/t5/image/serverpage/image-id/22175i5EAF3243F2EA6154/image-size/large?v=v2&amp;px=999" role="button" title="cp9.JPG" alt="cp9.JPG" /></span></P> Wed, 23 Aug 2023 02:08:29 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/Allow-to-Windows-Update/m-p/190217#M67620 handiansudianto 2023-08-23T02:08:29Z https://community.checkpoint.com/t5/Firewall-and-Security-Management/Allow-to-Windows-Update/m-p/190547#M67621 <P>Do you have Application Control and URL Filtering enabled?</P> Fri, 25 Aug 2023 06:40:55 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/Allow-to-Windows-Update/m-p/190547#M67621 _Val_ 2023-08-25T06:40:55Z