How to create an access rule for Microsoft Update sites in MS ISA

 

Open the ISA Management console.

In the left pane, right-click Firewall Policy, click New, and then click Access Rule.

In the Name field, type Windows Update, and then click Next.

Click Allow, and then click Next.

In the This rule applies to list, click Selected Protocols.

Click Add.

In the Add Protocols dialog box, expand Web.

Click HTTP, and then click Add.

Click HTTPS, and then click Add.

Click Close, and then click Next.

In the Access Rule Sources dialog box, click Add.

In the Add Network Entities dialog box, expand Networks.

Click Internal, and then click Add.

Click the network object for each network that requires access to Windows Update, and then click Add.

Click Close, and then click Next.

In the Access Rule Destinations window, click Add.

In the Add Network Entities window menu bar, click New, and then click URL Set.

In the New URL Set Rule Element window, in the Name field, type Microsoft Windows Update.

Click New.

In the URLs included in this set list, change the new entry to type url mentioned here. repeat this to add all the urls, then click ok.

 

http://download.windowsupdate.com

https://*.windowsupdate.microsoft.com

http://*.windowsupdate.microsoft.com

http://*.update.microsoft.com

http://*.download.windowsupdate.com

http://update.microsoft.com

http://*.windowsupdate.com

http://download.microsoft.com

http://windowsupdate.microsoft.com

http://ntservicepack.microsoft.com

http://wustat.windows.com

https://*.update.microsoft.com

https://update.microsoft.com

In the Add Network Entities window, in the URL Sets section, click Windows Update, click Add, and then click Close.

Click Next two times, and then click Finish.

In the top part of the middle pane, click Apply.
In the top part of the middle pane, Apply and Discard buttons appear.

Click Apply.

When a “Changes to the configuration were successfully applied” message appears in the Apply New Configuration dialog box, click OK.