Skip to main content
Albert1
Visitor III
February 26, 2025
Solved

Firewall blocking all Microsoft products

  • February 26, 2025
  • 1 reply
  • 1383 views

Hi All,

 

I need to know which Internet services/applications should be enabled/allowed through a Fortinet FW in order to allow Windows PCs to receive Windows/Office updates.

Best answer by pminarik

The relevant objects for MS/Windows updates are the ISDB entry "Microsoft-Microsoft.Update" and AppControl signatures such as "Microsoft.Windows.Update" or "Microsoft.Office.Update".

 

If the traffic is currently blocked, you may need to troubleshoot this further first to identify which policy is matching the traffic and how it is identified. (e.g. maybe the traffic is blocked by a more generic appctrl signature that was accidentally set to block)

1 reply

pminarik
Staff
pminarikAnswer
Staff
February 26, 2025

The relevant objects for MS/Windows updates are the ISDB entry "Microsoft-Microsoft.Update" and AppControl signatures such as "Microsoft.Windows.Update" or "Microsoft.Office.Update".

 

If the traffic is currently blocked, you may need to troubleshoot this further first to identify which policy is matching the traffic and how it is identified. (e.g. maybe the traffic is blocked by a more generic appctrl signature that was accidentally set to block)