When CAS is configured to connect to the Internet through a ProxySG, updates fail with an error message saying "Error Connection error".
It's important to ensure that the Content Analysis System is not subjected to SSL interception or authentication. You can do this with local or visual policy. Here is an example of the local policy, where x.x.x.x = the CAS IP address: