Unblock firewall to allow windows updates

[jonnyry]

Requires two changes:

1. Workspace NSG change

2. Firewall change

Outbound Firewall Application rule:

• From the Destination Types options, choose FQDN Tag.
• In the FQDN Tags option, select the pre-defined FQDN tag called WindowsUpdate.
• For the Protocol option, enter “HTTP:80,HTTPS:443.”
• Leave any TLS inspection option unselected if your firewall offers it.

https://techcommunity.microsoft.com/blog/windows-itpro-blog/changes-coming-to-the-azure-update-delivery-service-tag/4156552