External machines should be getting updates from microsoft but don't

[NobleComputing]

If I take a machine from the office to home, the Configuration Manager does show Internet. We have a management point on the DMZ that the machine connects to get a list of updates. It looks like the workstation is making communication with that server based on the logs. What is not happening is the actual successful download of the patches and the installation of them.

 

I read that the internet client should go to Microsoft updates first and then to a dp? We do not have a dp setup for the internet clients, as we want them to only download from the Microsoft, yet the packets I capture only point to the management point on the dmz. Any direction would be appreciated on getting these machines to download from windows update!