Ports and destinations quesiton for SEPM

Hello,

I have a SEPM setup in a zone that's extremely locked down behind firewalls.  Obviously we need to open up some ports so that the SEPM can update and send those updates to all clients.

We have 8014 opened up between SEPM and clients - that's not a problem.

The SEPM however is not updating with new content.  I see that we need to open ports TCP 80, 443, and 21 for LiveUpdate.  The problem with that is, opening those ports are waaay too broad for us.  We need specific destinations (IP address, DNS entries) each of these ports communicate to. 

Can someone give that information or point me in the right direction, please?

Thanks so much!