I posted a note to the "false positve" area, which is likely the wrong place, BUT how else can you define the fact that, by default, NIS 2010 firewall, installed on my Windows 7 64-bit system AUTOMATICALY (BY DEFAULT) BLOCKS UPDATES?!
(Note: if this already is fixed, please let me know, and point me in the right direction - thanks)
It is purely ridiculous and needs a simple fix. I've looked around, and one Microsoft MVP suggested created some 'bypass rule' to allow %windir%\system32\svchost.exe to have access both inbound & outbound on ports 443 & 80, but it should NOT BE THAT COMPLICATED! Why on earth is Norton, by default, BLOCKING *NECESSARY/MANDATORY* WINDOWS UPDATES?!
This should be a HUGE COMPLAINT AND "FAQ" item! It should have a *SIMPLE* setting, much like when we do "trusted sites" in IE, we say, "Allow *.updates.microsoft.com" (or along those lines) and we simply add/allow those certain sites as 'trusted sites.'
*FEATURE SUGGESTIONS BELOW*
EVEN BETTER: Have Norton [COMMUNICATE] with IE, Firefox, etc. and say, "Oh, you have added "http://*.updates.microsoft.com" as 'trusted site," therfore, I will craft the proper rule to allow that group of sites to download updates to your computer" (that would be a summary of one way to describe how Norton might interact with other areas in which we already have listed certain 'trusted' entites).
Alternatively, allow a set of "simple rules" - i.e., Allow "http://*.updates.microsoft.com" inbound, ports 443 & 80."
As it stands, you force us to enter IP addresses for traffic & program rules, but IP addresses often change, so we need to be able to enter DNS names, such as "updates, microsoft.com" and even wildcards when necessary, because MS may add ANOTHER update host to their array of curent update hosts. Maybe this feature already is available on Norton 2010, but I have yet to find it.
FYI, when I turn off Norton firewall, Microsoft/Windows Updates run PERFECTLY; but when on, I get the infamous error:
"80072EFD - windows update encountered an unknown error."
Someone PLEASE point me in the right direction and let me know the fix for this! Thanks in advance.