You can enable 'sync to peer' on the dynamic update schedule, so all updates are fetched and installed from one member.
to troubleshoot what is causing this, you would need to figure out what is happening to the connection the moment it is scheduled, by collecting packetcaptures and reviewing security policy, to ensure DNS is resolving properly and the connection is being allowed through
You can enable 'sync to peer' on the dynamic update schedule, so all updates are fetched and installed from one member.
to troubleshoot what is causing this, you would need to figure out what is happening to the connection the moment it is scheduled, by collecting packetcaptures and reviewing security policy, to ensure DNS is resolving properly and the connection is being allowed through