Trouble updateing

I have installed CIS onto a number of workstations with limited internet connections.

By using a firewall logger i have managed to make a note of the ip address CIS uses to update, but everytime i add it to the linux firewall, it needs access to another ip address

anyone have any ideas