OS: Windows, 7, 8,10, 2008, Windows Server 2012, Windows Server 2016, Windows Server 2019 

Here is the list of Windows Update servers, URLs, and ports you need to allow through your Firewall, Proxy or Corporate firewall.

SlWindows Update/ WSUS Server URL List
1http://*.download.windowsupdate.com
2http://*.update.microsoft.com
3http://*.windowsupdate.com
4http://*.windowsupdate.microsoft.com
5http://.download.windowsupdate.com
6http://.update.microsoft.com
7http://.windowsupdate.com
8http://.windowsupdate.microsoft.com
9http://dl.delivery.mp.microsoft.com
10http://download.windowsupdate.com
11http://go.microsoft.com
12http://ntservicepack.microsoft.com
13http://windowsupdate.microsoft.com
14http://wustat.windows.com
15https://*.update.microsoft.com
16https://*.windowsupdate.microsoft.com
17https://.update.microsoft.com
18https://.windowsupdate.microsoft.com
19https://dl.delivery.mp.microsoft.com
20https://download.microsoft.com
Windows Update Server List

Windows Update Firewall Exception List

Allow these Windows Update URLs through the firewall

ProtocolEndpoint URL
TLS 1.2*.prod.do.dsp.mp.microsoft.com
HTTPemdl.ws.microsoft.com
HTTP*.dl.delivery.mp.microsoft.com
HTTP*.windowsupdate.com
HTTPS*.delivery.mp.microsoft.com
TLS 1.2*.update.microsoft.com
TLS 1.2tsfe.trafficshaping.dsp.mp.microsoft.com

Windows Update (WSUS) – Incoming and Outbound Ports to Be allowed

  • WSUS 3.2 and Earlier Versions – Port 80(HTTP) and 443(HTTPS) should be allowed through the firewall.
  • WSUS 6.2 and later versions – Port 8530 (HTTP) and 8531 (HTTPS) should be allowed through the corporate firewall used

List of Windows Update Ports

WSUS VersionHTTP PortHTTPS Port
WSUS 2.080443
WSUS 3.080443
WSUS 4.080443
WSUS 5.080443
WSUS 6.285308531
WSUS 10.085308531