FQDN used by UNC "Sophos" for update

I am doing an analysis on my network and would like to identify what is the FQDN or range of IP addresses used by UNC "Sopho" for online update (http / https), how do I get this information?