Keeping the internet out is only the beginning of what my firewall does.
Both August client and server-side updates ship with empty known-issues lists. This may change over the coming days so checking back to the Microsoft Security Update Guide (MSRC) may be prudent.
My network finally tells me what's wrong.