When configuring outbound Software repository rules on your firewall, allow the following DNS entries to be accessed by the Sentry and Connector servers depending on which version:
http://support.mobileiron.com/cloud-connector/current/
http://support.mobileiron.com/cloud-sentry/current/
http://updates.anyware.com/updates/sentry/