Unfortunately, whitelisting wuauserv service and svchost.exe is still blocking Windows Update from downloading updates, with error 80240438. We inherently block all outgoing connections, and whitelist what we need. We have a couple machines deployed to a retail environment and due to budget constraints, are limited to Windows Firewall as our firewall.
