The following is IDS update flow.

1. Device send the MAC by http protocol (port:80) to D-Link pattern update server
2. D-Link pattern update server receive and check the MAC with Registration Database if the MAC is registered.
3. If the MAC is not registered by the customer, Update server will send error message to device by port 80
4. If the MAC is registered by the customer, Update server will send the latest signature to device by port 80

The update service uses the HTTP protocol (port 80). No rules has to be added in the firewall. If there is other equipment between the firewall and the Internet that blocks traffic, just add a rule into that equipment that allows traffic on port 80 from the DFL firewall to the Internet.