open sepm
select policies
select firewall policies
select trafic and stealth settings
if you have checked the option enable os fingerprint masquerading then windows update will not work.coz it will not allow online updates to check what kind of os u have,,check it once if thats the case