Firewall blocking all Microsoft products

[Albert1]

Hi All,

I need to know which Internet services/applications should be enabled/allowed through a Fortinet FW in order to allow Windows PCs to receive Windows/Office updates.

[pminarik · Accepted solution]

The relevant objects for MS/Windows updates are the ISDB entry "Microsoft-Microsoft.Update" and AppControl signatures such as "Microsoft.Windows.Update" or "Microsoft.Office.Update".

If the traffic is currently blocked, you may need to troubleshoot this further first to identify which policy is matching the traffic and how it is identified. (e.g. maybe the traffic is blocked by a more generic appctrl signature that was accidentally set to block)