Outbound rules for Windows Update (Windows Firewall)

Where do you want to create the rule? On the endpoint, no outbound rules should be needed. What update solution are you using? In general, unless you've customized your Windows Firewall in some manner, you shouldn't need to do anything to allow windows updates to download to the endpoint. If you're downloading directly from MS Updates Servers your endpoints, are you sure you have your edge firewall configured to allow traffic from those servers? In fact even if you have a update solution on the server, can they get traffic from the MS update servers? You're missing so much information to give an answer