ASM Attack and Bot Signatures Update Flow

Hello,

I have a box that is requiring update to the Attack and Bot Signatures. However, due to security Lockdown, I'm not able to identify the required flows that should be allowed on the Firewalls to let the ASM get the updates.

I was wondering, what flows are required for this to be accomplished? I'm not going to open a destination any from the ASM Mgmt interface.