I have a Surface Pro with Windows 8.1, the firewall is configured to block both inbound and outbound connections. I have rules set up to allow company traffic through the tablet as well as the following rules for Windows update.

Process - %SystemRoot%\System32\svchost.exe
Services - Windows Update
Remote ports 80, 443

Process - %SystemRoot%\System32\svchost.exe
Service - BITS
Remote Ports 80, 443

Process - %SystemRoot%\System32\wuauclt.exe
Services - Windows Update

I am still unable to get updates with the tablet without disabling the firewall. I am getting the Window Update Error Code 80240438. Please let me know if any of you have any experience with this issue. 

Thanks,

• Edited by Alec.larson Friday, February 28, 2014 6:29 PM

Hi,

It's not enough to allow Windows update related service. Also need contains Windows update server.

The error code you mendtioned means network problem. For your situation, it's your firwall problem.

Can you be a bit more specific? Which process is the Windows update server? Which services or applications need outbound access in order for Windows Update to function properly?