If BOTH MobiControl servers and devices are all restricted to a CLOSED Wifi-only corporate network, and only the MobiControl server can have firewall exception(s) added for very limited access to support servers, then what firewall exceptions should be added to allow Bitdefender Antivirus latest definition update file be REGULARLY updated (as configured in the Antivirus payload in a profile) to the targeted devices via MobiControl deployment server?