We currently use the Proxy-Based Content Blocker to stop unsupervised Windows Update (We've had a few issues in the past with some specific builds causing Intel USB Buses to reboot constantly)
However, the Proxy-Based Content Blocker seems to have changed with a recent firmware update to not affect https traffic (stopping this from working), and we need to use wildcards hence the Web Filter doesn't fill the gap. I don't like the idea of running on old firmware versions is there any way of blocking HTTPS traffic via another interface or SSH'ing into the router and manual commands?