Is possible to create a firewall rule that allow traffic to Sophos update?

Hi Guys,

Almost my Server is using Sophos Endpoint for protecting. Due to the restriction of internet access on the servers, the Sophos Endpoint Security cannot get the update.

The question: How can I create a firewall rule on XG firewall that allows Server access to Sophos Update server to get all the update only?  

Thank you.