Previously in Windows 7 and Vista, you could configure Windows Firewall to allow specific outbound traffic via "svchost".  For example, to allow outbound traffic for Windows update, you would allow the program "%SystemRoot%\System32\svchost.exe" with "wuauserv" selected under "Apply to this service".  

In Windows 8.1 and 10 that functionality no longer exists.  Creating such a rule results in network connectivity errors for both OS.  If a rule is created to allow "%SystemRoot%\System32\svchost.exe" and "Apply to services only" windows update also fails (meaning there is more than the defined services at work here).  The only way I can get it to work is if I just allow "%SystemRoot%\System32\svchost.exe" completely or "%SystemRoot%\System32\svchost.exe" and "Apply to all programs and services", which defeats the purpose of me trying to block all services, but those that require network access.  

Any help in addressing this problem is appreciated.

Hi ArigatoD,

svchost.exe is a system process belonging to the Microsoft Windows Operating System which handles processes executed from DLLs. This program is important for the stable and secure running of your computer and should not be terminated. By default, the windows firewall will not prevent this process outbound traffic, you need not to add any rule to manage the traffic and it is also not recommended.

Best regards,

Hi

Sorry, but this is not answer. He was not asking about svchost.exe, He know what is this process. He was asking why is not possible set outbound rule for Windows Update, In previous Windows versions it was possible, so pleas stop wasting our time with answers on something else.