Windows Updates

[privacyguy123]

I think we need to revisit the Windows Update allow list, I have had to manually allow tons of connections through svchost to get Windows 10 updates to install properly ...

[savchenko]

I have checked with the most recent lists from @crazy-max, Windows Update works if "Microsoft Application Servers" option in Simplewall is set to "Disable". Yet to find which IP/range causes this.

[turkeyhandwoven]

I don't mean to hijack this topic, but one thing I wonder because of the people having issues with Simplewall and Windows updates:
Why don't you just download the updates directly from the Microsoft Update Catalog and install them manually? It's not a lot of work.
You can even download the security intelligence updates for Windows Defender (if you use that) here.
So you don't have to allow anything related to the update services through the firewall.

If there something wrong with doing it this way, please let me know.

Best regards.

[savchenko]

@turkeyhandwoven , how do you automate the process? It's easy to miss an update if such routine is conducted manually and there should be a mechanism to notify user about the new updates being available.

[turkeyhandwoven]

I didn't automate the process (although there are surely ways to do this).
The updates are not coming out frequently enough that would make it necessary for me to do so.
I usually check the update history once a day anyway, so I get informed that way.

Best regards.

[savchenko]

@henrypp , do you have anyh particular thoughts on this matter?

[qupig]

I don't mean to hijack this topic, but one thing I wonder because of the people having issues with Simplewall and Windows updates:
Why don't you just download the updates directly from the Microsoft Update Catalog and install them manually? It's not a lot of work.
You can even download the security intelligence updates for Windows Defender (if you use that) here.
So you don't have to allow anything related to the update services through the firewall.

If there something wrong with doing it this way, please let me know.

Best regards.

@turkeyhandwoven

For those seeking extreme privacy, an offline update package is a better choice.

But many times, the automatic update will provide the greatest convenience. It can better match the updates that need to be installed, especially some hardware drivers, such as Surface Firmware, or even firmware updates for peripheral devices like Surface Dock. Obviously finding these updates alone is not easy and convenient.

This is just one of the reasons why people need automatic Windows updates.

[henrypp]

dup #677