Antivirus is not updated due to the limitation of downloading exe-files by the proxy server?

Question

iptables

Good afternoon!
I have a gateway (Ubuntu 14) with a transparent Squid proxy configured. Squid is blocking the loading of .exe files, and therefore there is a problem when updating Windows Defender (error code: 0x8024022).
tcpdump showed that addresses like "a104-108-166-105.deploy.static.akamaitechnologies.com" are being accessed using the "http" protocol.
I want to write firewall rules to bypass the proxy server when updating the "Defender". Is it possible to somehow find out the addresses of the servers from where the "Defender" takes updates?

Answer 1

It is forbidden. Since MS didn't bother with the format, roll out updates manually or with the help of WSUS, which will pull updates without a proxy.