Windows Update and Microsoft Store backend services and Windows Update and Microsoft Store payloadsįor more information about remote work if you're using Configuration Manager, see this post on the Configuration Manager blog.With split tunneling, make sure to allow direct access to these endpoints: It combines data from Microsoft data centers and local devices, the combined data helps to deliver a complete update faster at a low bandwidth cost. When the device is not connected using a VPN, it can still use peer-to-peer with the default of LAN. I believe you can just turn it off in Settings. This reduces internet bandwidth during update operations but may hog up bandwidth for other services. Do not use Delivery Optimization and use BITS instead. Delivery Optimization is a service which allows you (and other people on your network by default) to share update files. If you have defined a boundary group in Configuration Manager for VPN IP ranges, you can set the DownloadMode policy to 0 for that boundary group, to ensure that there will be no peer-to-peer activity over the VPN. Delivery Optimization downloads using HTTP only and does not attempt to contact the Delivery Optimization cloud services. However, you can allow uploads over a VPN by using the Enable Peer Caching while the device connects via VPN policy. If the connection is identified as a VPN, Delivery Optimization will suspend uploads to other peers. A connection will be treated as a VPN if the adapter description contains certain keywords, such as 'VPN' or 'secure.' Delivery Optimization attempts to identify VPNs by checking the network adapter type and details.

Delivery optimization network usage