| Description | This article describes how to block Windows updates without UTM features. |
| Scope | FortiOS. |
| Solution |
Go to Policy & Objects -> Firewall Policy -> Create New. The incoming interface is LAN while the outgoing interface is WAN. Destination select Internet Service and filter by the word 'update' then choose 'Microsoft-Microsoft.Update' then the action is Deny.
Enable Log Violation Traffic so it is possible to view the log under the forward traffic log. Select 'OK' to save the policy.
Remember to drag the firewall policy on top of allowing other traffics firewall policy. From Log & Report -> Forward Traffic, it is possible to see that the firewall policy had blocked Windows updates.
|
