Windows Updates

[#1]

I am setting up some new WIN2000 boxes from scratch behind a Fortigate 200. Once I have the operating system up and running, I run the Windows Update. All but the last two updates work fine, but the systems fail to install the latest two WIN2K updates. When I disable A/V and Firewall (see attached image), the updates install without a problem. How do I program the Fortigate to allow Windows Update to work properly (without disabling A/V)?

[#2]

You must input http://windowsupdate.microsoft.com into the Url Exempt list. You can find it in the Web Filter menu.

[#3]

ASLO... Check URL exempt list on the content profile you are using for the rule. It is not checked by default so even if in the exempt list this does not work by default.