Have a WAN. Use Cisco routers with Cisco PIX firewall. Have blocked all general internet traffic. Would like to allow WindowsUpdate for the desktops in the network without having to interface with the PIX and allow all internet traffic. Microsoft does not have static IPs for their servers so cannot create static access list to allow access to Microsoft. Any ideas.