I have a Surface Pro with Windows 8.1, the firewall is configured to block both inbound and outbound connections. I have rules set up to allow company traffic through the tablet as well as the following rules for Windows update.

Process - %SystemRoot%\System32\svchost.exe
Services - Windows Update
Remote ports 80, 443

Process - %SystemRoot%\System32\svchost.exe
Service - BITS
Remote Ports 80, 443

Process - %SystemRoot%\System32\wuauclt.exe
Services - Windows Update

I am still unable to get updates with the tablet without disabling the firewall. I am getting the Window Update Error Code 80240438. Please let me know if any of you have any experience with this issue. 

Thanks,

• Edited by Alec.larson Friday, February 28, 2014 6:29 PM

I used to have this problem.

In order to fix it I had to stop the wuauserv service and then start it.

in the command prompt run:

net stop wuauserv

net start wuauserv

it seemed weird to me because rebooting didn't fix it.

I only have one outbound rule for windows update which is the same as your first one:

Program:  %SystemRoot%\System32\svchost.exe
apply to this service:  Windows Update   -- wuauserv
Remote ports tcp 80, 443

hope this helps,

shawn

• Edited by easynice 13 hours 54 minutes ago