Technical Tip: How to Block Windows update by FortiGate

[ap]

Description	This article describes possible ways to block Windows updates.
Scope	FortiGate, Windows updates.
Solution	Two Ways to Block MS Updates: ISDB. Create a denied firewall policy with 'Microsoft-Microsoft.Update' ISDB (Internet service database) as a destination in the firewall policy without any security profile applied. Move it to the top above all firewall policies. After configuring the firewall policy as above, retry Windows updates and it will be blocked. Application control. Create an Application control with block application signature MS.Windows.Update  After Creating a Firewall policy and applying application control. After configuring the firewall policy, retry Windows updates and it will be dropped.