topic Re: Spli tunneling for ms-update files in General Topics

Spli tunneling for ms-update files

BigPalo — Mon, 26 Apr 2021 11:10:34 GMT

Hi,

We have GP configured with 0.0.0.0/0 inside tunnel. We would like to split-tunneling for microsoft updates. In the split tunneling profile we add several microsoft URLs in order to avoid but its not working.

We added this URLS:

*.update.microsoft.com

download.microsoft.com

But in data filtering we can see the updates being downloaded using PA.

how can prevent msupdates for split?

Re: Spli tunneling for ms-update files

BPry — Mon, 26 Apr 2021 18:35:59 GMT

https://*.prod.do.dsp.mp.microsoft.com
http://emdl.ws.microsoft.com
http://*.dl.delivery.mp.microsoft.com
http://*.windowsupdate.com
https://*.delivery.mp.microsoft.com
https://*.update.microsoft.com
https://tsfe.trafficshaping.dsp.mp.microsoft.com

@BigPalo

The above URLs is what Microsoft has listed for endpoints for Win10 2004 and matches what was listed for 1909. That should capture the majority of the Windows Update traffic, but there's ways to add even more domains if you allow downloads via 3rd-party ect.

Re: Spli tunneling for ms-update files

BigPalo — Tue, 27 Apr 2021 09:39:57 GMT

We have all these URLs, but we still can see the clients downloading the ms-update files using Palo.

Re: Spli tunneling for ms-update files

BigPalo — Wed, 28 Apr 2021 14:46:41 GMT

any idea?