Allow Windows update blocked by Fortigate

FortiGate

FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.

Article Id 274113

Description

It is possible that FortiGate might block Windows updates due to security profile inspection by an Antivirus profile, Web Filter profile, or Application control profile.

This article describes how to allow only Windows updates without making any changes to existing security profiles.

Scope

FortiGate, Windows update.

Solution

Create a firewall policy with 'Microsoft-Microsoft.Update' ISDB (Internet service database) as a destination in firewall policy without any security profile applied.

Move it to the top above all firewall policies (or above the firewall policy that blocks Windows updates):

After configuring the firewall policy as above, retry Windows updates and it will be successful.

18187

Broad. Integrated. Automated.

The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.

Technical Tip: How to allow Windows update blocked by FortiGate