SEM can't update in different VLAN

Hello,

We have different VLAN in our network, so we use firewall policy to let them allow TCP 8014, 80, 7070 to connect SEPM, but all VLAN clients showing definitions are out of date, there clients can use LiveUpdate from SEPM.

Thanks