I am trying to support an office in Africa that has, at best, bandwidth of 100-200K . I'm looking for suggestion to block bandwidth intensive services like Windows Update, Adobe updates, or anti-virus updates from sucking all of the bandwidth.
This office supports several desktops and laptops that are not in a domain or set up for group policy. They are also host to several guests in a guest house.
Because only a few of the computers accessing the Internet here are under control of the organization, I'm looking for a solution at the WAN/LAN interface or at the wifi routers.
The incoming bandwidth is routed through a Netgear Prosecure UTM25s using both WANs providing load balancing. WAN1 has, on a good day, up to about 250K down/50K up. WAN2 has, at best, 10K down/1K up.
There are three LANs feeding ASUS RT-N16 wifi routers. Most of the access is through the wifi routers. The office PCs are connected to LAN1 by CAT5.
So far, blacklisting the Microsoft update sites in the UTM25 has not helped. Windows updates are still hogging all the bandwidth. Using QoS has limited usability because the lowest limit is 100k, which is pretty much the whole bandwidth.
Any suggestions?