Access to Windows Updates through Outbound Firewall Rules when using SaaS

I created an outbound firewall rule, using a grouped network for my source vlan, and the Microsoft Services SaaS. I can’t seem to do Windows Updates on a Windows machine on that VLAN. Is Windows Update not a “Microsoft Service”?