Threat prevention exclusion not working

[andy_currigan]

our antivirus threat prevention policy drop exe files.

we need to create an exception in order to let our microsoft system to download windows update files.

we configured a threat prevention exception rule with destination a domain object .windowsupdate.com. but the updates are still blocked (see attached screenshot log).

any idea how to avoid this block?

thanks

[PhoneBoy]

See the following thread: https://community.checkpoint.com/message/18526-re-exclude-windows-updates-from-threat-emulation