Need FQDN for Windows Server 2016 auto updates...

Question

I am needing to create access rules for a secure DMZ. I need to allow Server2016 to update, but cannot seem to find the correct FQDN to add to the rule.
I have tried:

Download.windowsupdate.com
Windowsupdate.microsoft.com
Update.microsoft.com

but still does not seem to find it.

Is there a more current FQDN to use?

T.I.A.

Answer 1

https://learn.microsoft.com/en-us/windows-server/administration/windows-server-update-services/deploy/2-configure-wsus#211-connection-from-the-wsus-server-to-the-internet

Answer 2

Make sure the device has unfettered access to sites.

15528-updatesites.txt

--please don't forget to Accept as answer if the reply is helpful--

Answer 3

Hi BrandonAudet-8450,

Thanks for your posting on this forum.

In my opinion, the WSUS servers which want to get updates from Microsoft sites must be able to access the following sites:

http://windowsupdate.microsoft.com

http://*.windowsupdate.microsoft.com

https://*.windowsupdate.microsoft.com

http://*.update.microsoft.com

https://*.update.microsoft.com

http://*.windowsupdate.com

http://download.windowsupdate.com

https://download.microsoft.com

http://*.download.windowsupdate.com

http://wustat.windows.com

http://ntservicepack.microsoft.com

http://go.microsoft.com

http://dl.delivery.mp.microsoft.com

https://dl.delivery.mp.microsoft.com

Reference link:
https://learn.microsoft.com/en-us/windows-server/administration/windows-server-update-services/deploy/2-configure-wsus

Regards,
Rita