SSL Decrypt & Windows Updates

Reply
Highlighted
L1 Bithead

SSL Decrypt & Windows Updates

Hello,

 

I've been having a problem with Windows Updates when SSL Decrypt is turned on and I'm wondering if anyone else had to add these "new" Microsoft URL's to the decryption exclusion list. My firewall is on version 8.0.3 and my Windows version is Windows 10 Enterprise 1703 (Build 15063.483). I'm not sure what update package includes SSL Decryption Exclusions but my App & Threats version is 718-4138. All the predefined exclusions are enabled in Device > Certificate Management > SSL Decryption Exclusion

 

Added URL's:

*.do.dsp.mp.microsoft.com

*.delivery.mp.microsoft.com

 

Once I added these two URL's to the exclusion list Windows Updates was able to check-in to Microsoft's servers, download the updates, and install them successfully. Without these exclusions Windows Updates would say there are no updates available. I'm still doing testing to see if these two URL's are the only ones that need to be excluded in addition to the predefined ones.

L4 Transporter

Re: SSL Decrypt & Windows Updates

Hello,

Thank you for your letting us know!

I will check if we could add these URLs to the list (list is being pushed through the content update - apps and threats). 

BR, -Nikola
L2 Linker

Re: SSL Decrypt & Windows Updates

I had to add these exclusions as well for Windows Updates and Windows Defender Definition Updates to be downloaded to a Windows PC.

L4 Transporter

Re: SSL Decrypt & Windows Updates

did these ever get added to their list for palo?  I just ran into this problem today.

Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the Live Community as a whole!

The Live Community thanks you for your participation!