I have added the IP's you mentioned, and added everything with UDP too -> (HTTP/HTTPS 80/443 -> UDP and TCP)
But its not working, still getting "The update could not be downloaded" error.

Thank you in advance!

Ip Range 37.228.108.128 - 37.228.108.255 tcp = tcp Port 443
Ip Range 82.145.208.0 - 82.145.215.255 tcp = tcp Port 443
Ip Range 103.83.120.0 - 103.83.123.255 tcp = tcp Port 443
Ip Range 107.167.96.0 - 107.167.127.255 tcp = tcp Port 443

and i think ya pretty much got these basic ports for opera configured in your firewall (your udp dns port - tcp port 80 - tcp port 443)

so what if opera.exe & opera_autoupdate.exe has got or needs listen 'n port..

i've loaned my my test 'n laptop for the weekend..

but from what i saw both need listen 'n ports.. i can only see them for a split sec.. lol

i can't see port numbers but do know it the local port..

opera.exe need a Local Udp port
opera_autoupdate.exe needs Local Udp Ports too..

add it to firewall rules to see if it helps..

i've got sum older ips i found that i never see n e more.. but i will post them later.. when i get that laptop back..

so... i added all the IP-Ranges you said. But still the updates gives me a damn Error
I also was looking a bit in our FW-Logs, but i cannot find anything wrong, i get some packets "ALLOWED" by the Opera-Rule. There are only 2 IP's Blocked. 1 Which is from America, and whon from "KabelDeutschland". But i think they are not associated with Opera.

Is not any Opera dev around the forum? He should know, which Networks, IP-Ranged and stuff needs to be unblocked. Maybe there is a kind of "Logviewer" for Opera which can show what the Problem is while Updating...

Thank you very much in advance!

umm.. i see this one sumtimes.. may see it when vpn is off..
= Ip Range 82.145.208.0 - 82.145.215.255 Tcp = Tcp Port 443

opera_autoupdate.exe = vpn on or off
= Ip Range 185.26.182.64 - 185.26.182.127 Tcp = Tcp Port 443 = + your DNS TOO (i think)

Note - sumtimes if when opera vpn does not connect.. or sumthin not right.. its cause Akamai Technologies, Inc wanna connect 1st.. (Big Brother i guess).. lol not always but sumtimes..

Ip Range 23.192.0.0 - 23.223.255.255 tcp = tcp port 80

the notes about opera_autoupdate.exe in the above post are kinna same as opera.exe..

so here sum examples.. even tho sum stuff may be block 'n by your firewall..

Example Opera folder structure

C:\Program Files (x86)\Opera\launcher.exe

= launcher.exe is in the root directory
= launcher.exe only points to opera.exe thats in a different folder
= firewall rule does not ask for permission for launcher.exe ? - (This is really where opera.exe needs to be.. lol)

Example Opera folder structure

C:\Program Files (x86)\Opera\54.0.2952.64\opera.exe

= opera.exe is not in the root directory but needs firewall rule
= firewall rule asks for connection to start process opera.exe & its connections
= opera keeps changing the folder of opera.exe after each update
= ya may need to change the directory path to the sub-folder's name that contains opera.exe in your firewall

wish Sophos could wildcard..

What on Earth.. is the reasoning behind this folder structure ? ! lol

maybe they are meant to be like that.. so that Opera or a user can roll back to a previous version if something should go wrong.. *dam if i know.. esp with firewall rules involved..

when a typical Windows program is updated, the new version just replaces the old version.. the new version stays in the same place

i will post a few Ips for opera.exe sumtime later.. if ya want..

The Sophos link you gave me, is for the "AntiVirus" of Sophos. What is installed on the client to manage them. We only use the Firewall (Proxy) from Sophos, which is like a "classic" Firewall. I can just add something like IP's and IP-Ranges, URL's and stuff to create an exception for certain services or programs. The AntiVirus can give a local "Firewall" to the Client, but thats not what we have. On our company, we just have 1 firewall as a gateway to the internet (and VPN).

Thank you very much in advance!

But if it is checked - 20 sec. delay/error may be this

Go to Opera Settings or (type Ctrl+F12) > Basic > Block ads > Recommended lists > click the Manage lists button & then (Block Ads - Mange lists) window will pop up

look @ The one called - Other lists
2nd option called - Malware block

= if box has check mark
= may cause that 20 sec. delay/error
= Ip Range 88.99.0.0 - 88.99.255.255 tcp = tcp port 443
= Needs to be added to opera_autoupdate.exe firewall rule

Note - if box is unchecked - thats not cause 'n delay/error..

this might help.. since ya said this > disabled by Group Policy

take a look @ this web page called How to protect an unprotected computer in Sophos Enterprise Console found here

scroll down page & see the replies between MScott924 (who is ask 'n questions) and Wil Tulaba post..

they start talk 'n about Group Policies But the post is a lil bit old..

thank you for the reply. Sadly, it didnt work. I added the IP-Range you mentioned to my Firewall rule (Exception opera.com, *.opera.com, 185.26.182.64-185.26.182.127 TCP 80/443). Now, the Error while updating is not comming immediatly, it takes about 20 seconds, then i get "Error while searching for new Updates".

I added my Computer to a "Static_Exception" on our Firewall, which passes through everything for my Computer, then i get the Updater to work, but i cannot let every Computer open through Firewall.

I also disabled my AntiVirus (TrendMicro) so there is no blocking, but it didnt changed a thing. It even worked while TrendMicro on and Firewall Static Exception.

Our Windows Firewall is, as mentioned, disabled by Group Policy.

I guess there is a URL or IP / Port which gets blocked by our Firewall, which i need to add to the Opera Updater Rule.

Thank you very much in advance!

Example

look in opera 's directory..

Example
C:\Program Files (x86)\Opera\54.0.2952.64\opera_autoupdate.exe

(Opera Update) = opera_autoupdate.exe = Ip Range 185.26.182.64 - 185.26.182.127 tcp and uses tcp port 443

Note - everytime Opera is updated.. it changes the folder name so that it includes the actual version of the browser but leaves the old version also = opera_autoupdate.exe will be in a new folder so ya may need to edit directory path each time it updates..

If ya get it to work 'n.. pls post for other opera users.. thx !..