Below is a list of domains I'm compiling for "White listing" as security sites.
; Microsoft Updates
windowsupdate.microsoft.com
update.microsoft.com
go.microsoft.com
download.windowsupdate.com
;Apple Updates
swquery.apple.com
swcdn.apple.com
swcatalog.apple.com
supportdownload.apple.com
;Adobe Updates
swupmf.adobe.com
crl.adobe.com
;Google
safebrowsing-cache.google.com
safebrowsing.clients.google.com
; Bluecoat
bluecoat.com
av-register.co.uk
;Anti-Virus Updates
*.sophos.com
update.nai.com
guru.avg.com
liveupdate.symantecliveupdate.com
liveupdate.symantec.com
avast.com
f-secure.com
products.kaspersky-labs.com
novell.com
microsoft.com
malwarebytes.gt500.org
mbamupdates.com
avg.com
avg.cz
global-download.acer.com
windowsupdate.microsoft.com
update.microsoft.com
download.windowsupdate.com
redir.metaservices.microsoft.com
images.metaservices.microsoft.com
c.microsoft.com
www.download.windowsupdate.com
wustat.windows.com
crl.microsoft.com
sls.microsoft.com
productactivation.one.microsoft.com
ntservicepack.microsoft.com
www.update.microsoft.com
dstdomain sls.microsoft.com
;AVG
.avg.com
.avg.cz