[suppo]

Hello group.

I've a subnet which i want to restrict access to a number of specific sites (windows, virus updates) and block everything else.

After doing some reading the best way i've discovered is via a URI file but the problem with this is that it isn't dynamic enough, i.e windows updates can use a whole host of different servers and the file seems to be only interested in IPs which of course can change.

I was hoping somebody can point in the direction of a more dynamic solution, one which may involve *.microsoft.com.

Thanks