Bypass the default policy for Windows Update?

[Guest]

[Scine]

Hello,

In my default policy, I have application/octet-stream under the blocked mime types.  This has helped me out tremendously for my users who continually try to download the latest bits of unauthorized software from the internet.  However, it also blocks updates from microsoft's website.  Even though microsoft.com as well as all the subdomains associated with it are on the whitelist, the application/octet-stream blocks it.  Is there a way around this?  Thanks in advance!  I've tried blocking just:

application/x-exe
application/x-msdos-program
application/x-msdownload
application/x-winexe

and the system still allows people to download these files.  Am I missing something?  The proxy is set to transparent mode as well.


Travis