Hi,
We've blocked Windows updates on our firewall using *.windowsupdate.com, but this also blocks "ctldl.windowsupdate.com" - I believe the latter URL is only used for CRLs, am I right in thinking if we allow the CRL URL only, it doesn't allow Windows Update?
Essentially, we want to allow clients the ability to update their CRLs, but not use Windows updates as we want to stop uncontrolled updates (we use SCCM for managed updates).
We need ctldl.windowsupdate.com to successfully roll out ATP and to ensure that CRLs updated, but we do not want to allow servers to update over the internet.
Thanks
Pete
