SSL Decrypt & Windows Updates

[kalakai]

Hello,

I've been having a problem with Windows Updates when SSL Decrypt is turned on and I'm wondering if anyone else had to add these "new" Microsoft URL's to the decryption exclusion list. My firewall is on version 8.0.3 and my Windows version is Windows 10 Enterprise 1703 (Build 15063.483). I'm not sure what update package includes SSL Decryption Exclusions but my App & Threats version is 718-4138. All the predefined exclusions are enabled in Device > Certificate Management > SSL Decryption Exclusion

Added URL's:

*.do.dsp.mp.microsoft.com

*.delivery.mp.microsoft.com

Once I added these two URL's to the exclusion list Windows Updates was able to check-in to Microsoft's servers, download the updates, and install them successfully. Without these exclusions Windows Updates would say there are no updates available. I'm still doing testing to see if these two URL's are the only ones that need to be excluded in addition to the predefined ones.

[nkajgana]

Hello,

Thank you for your letting us know!

I will check if we could add these URLs to the list (list is being pushed through the content update - apps and threats). 

[icartwright]

I had to add these exclusions as well for Windows Updates and Windows Defender Definition Updates to be downloaded to a Windows PC.

[Sec101]

did these ever get added to their list for palo?  I just ran into this problem today.