topic SSL Decrypt & Windows Updates in General Topics

SSL Decrypt & Windows Updates

kalakai — Thu, 27 Jul 2017 08:35:42 GMT

Hello,

I've been having a problem with Windows Updates when SSL Decrypt is turned on and I'm wondering if anyone else had to add these "new" Microsoft URL's to the decryption exclusion list. My firewall is on version 8.0.3 and my Windows version is Windows 10 Enterprise 1703 (Build 15063.483). I'm not sure what update package includes SSL Decryption Exclusions but my App & Threats version is 718-4138. All the predefined exclusions are enabled in Device > Certificate Management > SSL Decryption Exclusion

Added URL's:

*.do.dsp.mp.microsoft.com

*.delivery.mp.microsoft.com

Once I added these two URL's to the exclusion list Windows Updates was able to check-in to Microsoft's servers, download the updates, and install them successfully. Without these exclusions Windows Updates would say there are no updates available. I'm still doing testing to see if these two URL's are the only ones that need to be excluded in addition to the predefined ones.

Re: SSL Decrypt & Windows Updates

nkajgana — Thu, 27 Jul 2017 21:42:17 GMT

Hello,

Thank you for your letting us know!

I will check if we could add these URLs to the list (list is being pushed through the content update - apps and threats).

Re: SSL Decrypt & Windows Updates

icartwright — Tue, 31 Oct 2017 20:20:32 GMT

I had to add these exclusions as well for Windows Updates and Windows Defender Definition Updates to be downloaded to a Windows PC.

Re: SSL Decrypt & Windows Updates

Sec101 — Tue, 23 Jul 2019 16:19:09 GMT

did these ever get added to their list for palo? I just ran into this problem today.