XG Windows Update Firewall Rule

Question

I'm having an issue with Windows update due to my firewall rules. Users can get out on 80,443, and a couple other application ports. Otherwise outgoing traffic is denied. I know there is a range of ports the the Windows update services uses so I attempted to add the FQDN of known update servers with any port allowed but that did not work. If I make an any out firewall rule for the affected workstation the updates flow. 
 Anyone have luck with this? Thanks in advance.

rfcat_vk · Accepted Answer

Have you enabled the web -> exceptions -> microsoft?

John Farren · Answer

We were having this exact issue with new Windows 10 Clients and enabling this setting fixed it! Thank you!!

Bohdan.S · Answer

Ports should just be 80 and 443, 
 This KB lists the domains: https://technet.microsoft.com/en-au/library/bb693717.aspx 
 Bits may be using port 443, but it might not be valid HTTPS traffic, so you may need to disable packet inspection for it to allow traffic to pass through.

Saleem Nasser · Answer

Go to 
 PROTECT->Web->Exceptions 
 Add this 
 ^([A-Za-z0-9.-]*\.)?live\.com\.?/ ^([A-Za-z0-9.-]*\.)?microsoft\.com\.?/ ^([A-Za-z0-9.-]*\.)?windowsupdate\.com\.?