Open up access on customer firewall for:
2. plds.avaya.com 135.11.53.85 on port 443*
3. pldsxml.avaya.com 135.11.53.86 on port 443*
The actual file downloads come from:
1. downloads.dlavaya.com on port 80
2. downloads.avaya.com on port 80
The IP addresses for these sites so far are:
104.71.76.235, 104.71.92.207, 104.85.230.99, 23.37.3.208, 23.61.49.156, 23.73.156.225, 23.201.87.42, 23.194.48.233, and 135.11.53.83
The bottom line is, that for SUM to work, there are many ways to fail through the customer firewall; if the customer allows TCP connections internal to external, then you are fine; they could add firewall rules to allow anything to *.avaya.com.
Here is a test you can use to validate pldsxml.avaya.com from your PC:
From the SMGR:
Note *: The port matrix guide for SMGR 6.3.8 states port 8443, but packet capture shows port 443.