Below are the network requirements for Auto-Update.
These would be in addition to any requirements for Jamf Pro.
If your organisation has a datajar.mobi or Jamf Cloud subscription, then this article is superseded by this article.
The below traffic needs to be direct. This means not proxied, nor inspected or SSL decrypted.