ArcGIS Enterprise 10.8.1 Offline Patching

[DaltonBloom]

We have a multi-machine ArcGIS Enterprise 10.8.1 deployment that is not connected to the internet and is an offline implementation of ArcGIS Enterprise 10.8.1. We would like to apply patches to the system and need to specify an IP address for which servers & IP addresses need to be let through the firewall to allow for downloading of the latest patches from ArcGIS Patch Notification Tool. The main ask is to determine what IP Addresses need to be added to the firewall to allow for ArcGIS Patch Notification Tool to work?

[ChristophK]

From another thread (Port used for "Check for ArcGIS Enterprise Updates" utility) I gathered the tool checks this URL first to get a list of available patch files

https://downloads.esri.com/patch_notification/patches.json

and subsequently downloads patches from the URLs specified in that JSON, which at this time all point to

https://gisupdates.esri.com/

The IP I see (with ping from my laptop) points to an Akamai IP, I guess a CDN, so IPs might not necessarily be stable.