Add outbound security rule to Windows Update
Windows Update uses a lot of IP addres ranges which also vary. On Azure servers I do want to use Windows Update but block all other internet access. Would it be possible to create a service "Window Update" on Azure Network Security Groups for outbound security rules. Service would allow access to all needed Windows Update servers and ports.
Kenneth Riley commented
Can't believe this is not already available. Really need this feature.
This is much desired feature.
logged this earlier before I found this one.
Provide NSG tag WindowsUpdate please. like Internet tag or VirtualNetwork tag.
Nick Gailloux (Softlanding) commented
The ability to create your own "objects" with IP ranges would be helpful too.
Andy B commented
I've just hit this problem too. Microsoft should be able to provide automatic groups of Windows Update and Azure regions for easy inclusion in NSG rulesets.