Any trick to get Windows 10 store to work through a WSA

[keithsauer507]

Were running the S300V and HTTP / HTTPS decryption and using wccp.

Is there any trick to get Windows Store to operate (from Windows 10)?  Were seeing a bunch of machines that upgraded to build 1803 lose access to the sticky notes app.  The only way to get it is to download it again from the windows store, but it just hangs and doesn't advance at all.  The only way is to change the switchport to another vlan which is our outside guest network, which is not subject to the WSA.

I was wondering what kind of decryption / passthrough or proxy bypass settings people may have in order for Windows store to operate correctly.

Thanks!

[Ken Stieers · Accepted solution]

I've got a list of MS domains in a custom category set to not require authentication and not require decryption

.apps.microsoft.com
.delivery.mp.microsoft.com
.download.windowsupdate.com
.update.microsoft.com
.windowsupdate.com
.ws.microsoft.com
apps.microsoft.com
aq.v4.a.dl.ws.microsoft.com
crl.microsoft.com
login.microsoftonline.com
watson.telemetry.microsoft.com