Windows 10: How to allow Windows Update as outbound connection?

What outbound rules are required to make Windows Update work? Also is blocking all outbound connections worth the hassle for increased security? I've been following a hardening guide however I think it's easy to make a mistake in the Firewall settings and I suspect that I have made a mistake somewhere...

:)

 

Outbound rules still show as allowed.

Why do all of the default (pre-defined) MS Firewall outbound rules still show as allowed when I have set outbound connections to block for the Domain, Private and Public profiles? Shouldn't setting outbound connections to block block everything in the outbound list?

 

How to configure Win10 firewall to block outbound connections without a rule, but still allow Windows Update?

For those of us that prefer to have Windows Firewall set to "Block Outbound connections that do not have a rule": What rule(s) need to be added to allow Windows Update to still work?

I've tried adding rules for Windows Update service, BFE, BITS, but the Windows Update still gives the error message "We couldn't connect to the update service. We'll try again later, or you can check now. If it still doesn't work, make sure you're connected to the Internet." Windows Troubleshooter just wants to unblock all traffic.

Any suggestions other than just allowing all outbound traffic? Thanks!

 

how to add a outbound rule to allow windows update to exchange information

yeah I allowed all outbound connections and it works, but when I turned on the outbound firewall it posted the same"can't connect" message. so the question is still there and I can't find which file windows update is using when it sends information to
the server.