How to block windows updates using firewall in Peplink GUI


#1

Hi there,

Does anyone have a foolproof way to block windows updates using the Peplink web GUI?

I’ve attempted this via the following option:

Firewall/ContentBlocking/WebBlocking/Customized Domains/

List of URLs I’ve tried:

http://ntservicepack.microsoft.com
http://stats.update.microsoft.com
http://.download.windowsupdate.com
http://download.microsoft.com
http://download.windowsupdate.com
http://
.windowsupdate.com
https://.update.microsoft.com
http://
.update.microsoft.com
https://.windowsupdate.microsoft.com
http://
.windowsupdate.microsoft.com
http://windowsupdate.microsoft.com

They’re all coming up as ‘Invalid Web Domain’

Does anyone have some practical advice to solve this?

Cheers,

Daryl


#2

Hello Daryl,

When adding any domains to the Customized Domain section, you will not need to include “http://” or “https://”. Please try adding the domains like this:
ntservicepack.microsoft.com
stats.update.microsoft.com
download.microsoft.com
download.windowsupdate.com
windowsupdate.com
update.microsoft.com
windowsupdate.microsoft.com

This should allow you to add all of the domains to the custom block list.


#3

Thanks Zac, figured that part out now and the sites were all accepted by the web GUI. I clicked save and applied the changes… However, we still noticed one of the PCs on the network picked up an update. Very frustrating! Do you happen to know if there’s anything else we’d need to add in to avoid windows updates? I’m going to use wireshark to test the activity and figure out what’s getting through, but was just wondering if yourself or anyone else out there in the community knows how to stop these?? Thanks!

Daryl Turner

Post Engineer / IT Lead

E: daryl@melodyvr.com

W: www.melodyvr.com


#4

I found another list that has mostly duplicates of your list, but it also had two new hosts:

wustat.windows.com
ws.microsoft.com


#5

Nice one Travis, I’ll give that a go!

Daryl Turner

Post Engineer / IT Lead

E: daryl@melodyvr.com

W: www.melodyvr.com