Windows 10: Smartscreen blocked by firewall - how to add rule to allow?

Hello I have my firewall configured to block outbound connections that don't meet a rule.
Although there are the default rules for Smartscreen still enabled, smartscreen still gives it's error message "Windows smartscreen can't be reached right now". If I enable all outbound connections it works, but I don't want to do that.

What rule do I need to add to allow it to work?

:)

 

Windows 10 Creators - How to disable Defender warnings when I have "Cloud Based" and "Automatic Sample Submission" turned off

That's a good start for a solution, Boris.

Here's the CLI for blocking sample submission for those who want to automate:

netsh advfirewall firewall add rule name="Block Sample Submission" dir=out action=block enable=yes profile=any localip=any interfacetype=any program="C:\Program Files\Windows Defender Advanced Threat Protection\SenseSampleUploader.exe"

Now I still need to make the SmartScreen warnings go away.

 

Stop Windows 10 Update Assistant from running

This has to be disabled in task scheduler and I go a step further and block it with the firewall also. Here is the script that I used in my environment:

********************************************

@echo off

REM Stop Update Assistant if running

taskkill -f -im UpdateAssistant.exe

taskkill -f -im UpdateAssistantCheck.exe

taskkill -f -im Windows10Upgrade.exe

taskkill -f -im Windows10UpgraderApp.exe

REM Block Update Assistant with Windows Firewall

netsh advfirewall firewall delete rule name="Windows 10 Update Assistant" dir=in

netsh advfirewall firewall delete rule name="Windows 10 Update Assistant" dir=out

netsh advfirewall firewall add rule name="Windows 10 Update Assistant" dir=in action=block program="C:\Windows\UpdateAssistant\UpdateAssistant.exe" enable=yes

netsh advfirewall firewall add rule name="Windows 10 Update Assistant" dir=out action=block program="C:\Windows\UpdateAssistant\UpdateAssistant.exe" enable=yes

netsh advfirewall firewall add rule name="Windows 10 Update Assistant" dir=in action=block program="C:\Windows\UpdateAssistant\UpdateAssistantCheck.exe" enable=yes

netsh advfirewall firewall add rule name="Windows 10 Update Assistant" dir=out action=block program="C:\Windows\UpdateAssistant\UpdateAssistantCheck.exe" enable=yes

netsh advfirewall firewall add rule name="Windows 10 Update Assistant" dir=in action=block program="C:\Windows\UpdateAssistant\Windows10Upgrade.exe" enable=yes

netsh advfirewall firewall add rule name="Windows 10 Update Assistant" dir=out action=block program="C:\Windows\UpdateAssistant\Windows10Upgrade.exe" enable=yes

netsh advfirewall firewall add rule name="Windows 10 Update Assistant" dir=in action=block program="C:\Windows\UpdateAssistantV2\Windows10Upgrade.exe" enable=yes

netsh advfirewall firewall add rule name="Windows 10 Update Assistant" dir=out action=block program="C:\Windows\UpdateAssistantV2\Windows10Upgrade.exe" enable=yes

netsh advfirewall firewall add rule name="Windows 10 Update Assistant" dir=in action=block program="C:\Windows10Upgrade\Windows10UpgraderApp.exe" enable=yes

netsh advfirewall firewall add rule name="Windows 10 Update Assistant" dir=out action=block program="C:\Windows10Upgrade\Windows10UpgraderApp.exe" enable=yes

REM Disable Update Assistant Scheduled Tasks

c:\windows\system32\schtasks.exe /change /tn "Microsoft\Windows\UpdateOrchestrator\UpdateAssistant" /DISABLE

c:\windows\system32\schtasks.exe /change /tn "Microsoft\Windows\UpdateOrchestrator\UpdateAssistantAllUsersRun" /DISABLE

c:\windows\system32\schtasks.exe /change /tn "Microsoft\Windows\UpdateOrchestrator\UpdateAssistantCalendarRun" /DISABLE

c:\windows\system32\schtasks.exe /change /tn "Microsoft\Windows\UpdateOrchestrator\UpdateAssistantWakeupRun" /DISABLE

REM Remove Upgrader Application

IF EXIST "C:\Windows10Upgrade\Windows10UpgraderApp.exe" (

"C:\Windows10Upgrade\Windows10UpgraderApp.exe" /ForceUninstall

timeout /t 30

)

exit

 

Update - I answered my own question.
Using the event log to capture which connections were being blocked, I found that the 4 "Smartscreen" rules seem to be for apps that Smartscreen has decided are OK and it created those rule, and not for itself. So Smartscreen isn't smart enough to tell the firewall it itself is OK. =) I added a rule to unblock:

%SystemRoot%\System32\smartscreen.exe

and now it works.

Info on how to set up event log to see what is being blocked here...
Windows Update and firewall - Windows 10 Forums

 

Thanks for posting your solution to help others in the future! *Thumbs

 

@xanderax,
Thank you for you post. This helpt me a lot. Thanks