How to Block Windows Updates in low bandwidth situation through routers?

[wannas]

I am trying to support an office in Thailand that has, at some site have bandwidth of 1000-3000K . I’m looking for suggestion to block bandwidth intensive services like Windows Update, Adobe updates, or anti-virus updates from sucking all of the bandwidth.

Please advise How to Block any Microsoft update sites ,

Best Regards,

[Ron_Case]

You can use the web blocking feature or outbound firewall rules to block Microsoft domain names used for Windows updates.

[mldowling]

Hello @wannas,
In you favourite search engine enter “firewall rules to block Microsoft updates” (& change Microsoft for each operating/device/service you want to block) and work through the half first dozen answers you will find out it is almost impossible to block most modern updates and it leave your systems open to vulnerabilities, though you can certainly attempt it.

You can have a go at putting these into the Content Filter within the router (best to use firmware 7 and above), if you have a higher end network device, then the there are more categories to help so you may not need to enter all of the domain you find from the above search results.

Have a look through these two previous posts for further information on how to do this once you have worked out your domains to block for your devices.

Introducing Web Content Filtering

As for Firmware 6.3, Peplink devices can block specific site categories as defined by publicly available blocking lists in addition to blocking specific web domains. Note: The available categories have changed a few time since being introduced. The screenshots in this article are taken from routers using firmware 8.0 Supported Devices Two versions are available: lite and full. The full version supports a larger blacklist with more specific categories. LITE Balance: One, 210, 310, 30 LTE MAX: …

Balance UI Deep Dive - Network Tab

The Peplink Balance UI is a constantly evolving entity. Firmware updates and/or hardware revisions have adjusted the interface on a number of occasions. To make sure that everyone is current on where feature locations are, let’s review the current UI more closely (after ensuring you’re on current firmware-current firmware at time of article is 7.1.0). The Network tab has undergone a number of revisions as new features have been added or revised. Under the WAN Option, you are able to see basic …

With such low bandwidth, another options is to only allow access to what they need for the business such as email server, document server, in house servers.
Be aware that if using certain software (such as office 365) they need to frequently verify the licence online or the software becomes either restricted or locked out.

Happy to Help,
Marcus

[Timothy_Frazier]

I was searching for how to block windows update low bandwidth through routers I found this article where guide about it what you give me advice about the article?

[wannas]

Can apply with Peplink Router right ?

[Michael234]

Just as an FYI, I found a list of domains to block to block Windows Update. Only tested on Windows 10 service pack 1909. There may be a domain or two that is not necessary in the list, but the list, as is, works. From here

Windows Update vs. my Router

the list is
prod.do.dsp.mp.microsoft.com
settings-win.data.microsoft.com
sls.update.microsoft.com
watson.telemetry.microsoft.com
ctldl.windowsupdate.com