While I'm using Rik's solution for now - allowing the appliance free reign to get out wherever it wants, I would prefer to close up that hole & have it only allowed to see the servers it needs for updates. Can I get a whitelist of any possible sites the appliances look for, please?