Thank you for posting in Microsoft Q&A forum.
You may check if your WSUS or SUP server can resolve the update.microsoft.com site by running the following command line:
nslookup update.microsoft.com
If the answer is the right solution, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Add comment".