FortiGate Application control Window Exception handling

[BeomBu]

Hello, I'm currently blocking Windows updates via Application Control on my FortiGate firewall.

However, I'm having trouble. I want to configure Windows updates to only install language packs. Is there a way to do this?

I checked the traffic flow, but I can't figure it out...

[mpapisetty]

Hi @BeomBu ,

With application control or ISDB control, there is no granularity within the windows updates as they are all served by the same/similar services from Microsoft servers. Such a requirement is best worked out using Microsoft Configuration Manager (ConfigMgr) or similar 3rd party tools.