firewall policies blocking internet but allowing windows and other updates

[reckless1]

hello all, i have a fortigate 50b, and i have a bunch of stations with specific IP addresses that i have blocked internet access to by using a restrictive policy. however i need to know how i can block internet access but allow windows updates and other software updates like java...

[rwpatterson]

With Fortiguard, it' s a bit ' backwards' . For the filtering to work, you have to enable things. If the users in this list try to go to the sites in the destination, Fortiguard will kick in, and filter at that level. Use Fortiguard to allow/block the sites, and any site not implicitly defined will be blocked since there is no policy allowing it. The default action for the fFortigate is block.