I blocked all Fortiguard web categories and added a url filter allowing all the needed urls (as you can see in attach1).
This doesn't work since the urls were blocked by the web categories filter as belonging to the blocked Information Technologie category.
I disabled the web categories filter and added a blocking filter at the end of the url filter list (attach2). But access was also blocked. I also tried allow and exempt in the url filter but the result was the same.
The problem could be solved by creating a IPv4 Policy using Internet Service as a destination rather than address objects and moving the policy to the top. That worked for us for some time but anyhow we're now experiencing problems such as that a server behind the firewall and properly configured policy sometimes updates just normally while sometimes the synchronization fails for some reason. After the initial configuration it worked normally and then suddenly we're experiencing a lot of problems with this WSUS policy.
If we enable all traffic to the internet everything works.
I added Internet Services as destination (Microsoft-Azure Microsoft-DNS Microsoft-Microsoft.Update Microsoft-NetBIOS.Name.Service Microsoft-NetBIOS.Session.Service Microsoft-NTP Microsoft-SSH Microsoft-Web) and some application in ApplicationControl (MS.Windows.Update Microsoft.CDN Microsoft.Portal Microsoft.Authentication Microsoft_Login). And its woking now.
The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.