XG85 cause Windows 10 Media Creation Tool to fail

We have a XG85 going to the Comcast SMC router. So the Sophos WAN does a DHCP to the SMC and gets a 10.1.10.x address. This is the same setup our Cisco used and worked fine. If I connect straight to the SMC router with a computer, media creation tool works fine. The only thing I haven't tried is turn DHCP off on the SMC and use another static IP as the WAN connection on the Sophos.

I looks like you have double-NAT scenario. This is not ideal solution but the most likely it is Web Filtering issue. Turn it off and check.

I have the same problem and yes turning things off fixes this, Y on earth do we have to keep turning of security to get simple things like this to work? This is just craziness.

By the way I found that HTTP scanning is causing the problem with downloading 'Insider Builds' and the 'Media Creation Tool'

Is this on the default LAN->WAN firewall policy? I don't have any scanning on and allow all and no intrusion detection. Still not working.

Setting Web Filter to None instead of Allow All in the Default Policy fixed the error.

Right. So I must keep asking Y do we need to keep disabling protection to get simple things working? This is craziness.

That's hardly a solution - you've turned the webfilter off for every device on your network..

There must be a way to allow it through the webfilter.

That's not true. You can enable or disable webfilter for a specific policy. I have a special policy for all my hardware devices like AppleTV.

Yes, it is true. He said he had turned off Webfilter in the DEFAULT policy. That means he has turned it off for everything, unless he has then created new policies to turn it on for specific devices - but that would be a back to front way of doing it.

Turning webfilter off for devices is NOT a solution - it is a workaround. Tuning the webfilter to work properly with Apple devices could be considered a solution, but there does not appear any way to do that currently.