Also, a lot of proxy solutions also have a capability to block the content from whitelisted HTTP URLs if the file size is too large, thinking that it might be malicious content. This again causes problems when Windows 10 Feature and Express Updates are downloaded!

Hence, it would be great to publish all the updates on both HTTP and HTTPS URLs and in ConfigMgr, have a feature to allow SUP and WSUS external connections and content download over HTTPS only, improving security and audit compliance.