Ensure your firewall allows outgoing traffic on (HTTPS) and Port 80 (HTTP) to Kerio's update servers.
from the Kerio Control machine itself: