Registering and Updating SLES12 - URLs and ports

I need to know if there is an option to add rules to a firewall to only allow the connection to SUSE for registration and updates. Is this even possible?

Port, protocol, url needs to be accessible for registration? (using YaST/Product Registration method)
Port, protocol, url needs to be accessible for updates? (using zypper method)