Windows 10: Win10 required outbound rules for update

Dear Community,

I just switched to windows 10 and I'm having problems with the firewall. I set it to block all, as a good fw should be. What processes do I need to allow for windows update and virus definitions (but nothing else) to work?

Thanks in advance!

:)

 

Windows Firewall issue with outbound rule

We block all outbound here for a number of good reasons beyond the scope of this issue.

We are on win10 1703. A new A/D site was added during the prior week and I found that all of the management tools for DNS,DHCP, etc failed with various errors such as access denied.

The firewall logs show that port 135 outbound was being blocked.

This is in spite of the fact that a rule is in place to allow this traffic.

I modified the rule to explicitly define the remote addresses rather than using the "Intranet" term which resulted in no behavior change.

Adding a ANY/ANY/ANY rule allows traffic.

Do we have a bug?

 

Docker on Windows 10. Is it an Inbound Rule or Outbound Rule?

First, you can see your network location by network and sharing center.





Then you can set rules to open tcp port 445 as following steps.

1. Right click Inbound rules, click New
   
2. Click Custom
   
3. In the new Window, select All programs, type the specified program path, or Services
   
4. Then you can select tcp port 445 in Local port and Remote port, you can use any
   
5. Then select Ip Scope as your requirements, you can use both any Ip address and any Ip daress
   
6. Select Allow the Connection or Allow the connection if it is secure
   
7. Select your profile, you can choose your current profile(As we see at the beginning), or select all
   
8. Then type the rule name(This is dependent on yourself)
   
9. After setting inbound rule, take the same action to create a outbound rule.
   

 

How to configure Win10 firewall to block outbound connections without a rule, but still allow Windows Update?

For those of us that prefer to have Windows Firewall set to "Block Outbound connections that do not have a rule": What rule(s) need to be added to allow Windows Update to still work?

I've tried adding rules for Windows Update service, BFE, BITS, but the Windows Update still gives the error message "We couldn't connect to the update service. We'll try again later, or you can check now. If it still doesn't work, make sure you're connected to the Internet." Windows Troubleshooter just wants to unblock all traffic.

Any suggestions other than just allowing all outbound traffic? Thanks!