The client computer must have outbound access to two ports on the WSUS server. By default, these are ports 8530 and 8531.