Windows update on VM's stopped working after blocking outgoing connections to internet

Question

We have blocked outgoing traffic from our VMs using NSGs. This also prevents us from updating our VMs with cumulative updates and important patches. Is there any way I can allow windows updates still by whitelisting or adding a service tag to the NSG?
I've tried the list of IP address mentioned in Microsoft Azure Datacenter IP list (West Europe). That still blocks the updates. Any help would be really appreciated. I think this is a basic requirement for every datacenter to block outgoing traffic to internet from the VMs

Answer 1

@Prajeesh Prathap ,

We do have a Service Tag for Licensing activation where you VM will contact the KMS server. But as of today service tags for Windows Update is not there. Please provide your feedback below.

Link: https://feedback.azure.com/forums/217313-networking/suggestions/32260814-add-a-network-security-group-tag-for-windows-updat#{toggle_previous_statuses}