Have an MX84 with firmware:  MX 13.36   Cannot run Windows Update (on either Windows 7 or Win 10) with Threat Protection on.  Disabled AMP & changed IPS to Detection Mode and it works.   I attempted to make the following AMP whitelists, but without success: *.windowsupdate.com/* *.microsoft.com/*   I can also document the issue from linux with: wget http://download.windowsupdate.com/c/msdownload/update/others/2018/10/27555021_67b2474502ce5e63e1b326899d29d08212ffe7c6.cab   That fails with AMP on, and succeeds with AMP off, so I know it is not an issue with any of the Windows workstations. ... View more