Signature updates while using a Checkpoint firewall

I want to set up the autoupdate for the signatures. What I want to know is how to configure this using a Checkpoint firewall?

 

Is there a small range of IP address that we can put into the f/w to allow it to resolve to the update site?

 

At the moment our Chekcpoint F.w isnt allowing us access due to the changing IP addresses

 

TIA