Some updates within MS17-OFF-04, MS17-05-OFF, and MS17-06-OFF fail to download to the Notification Server (NS) so the bulletins cannot be distributed in a policy.
Some of the Microsoft download URL's may be blocked by a firewall or proxy server. In addition, the bulletins contain about 70 updates and are about 18 GB in size so the download tasks may timeout before the downloads are completed.
Whitelist the following URL's so that they aren't blocked by firewall or proxy server:
If the download task times out before all 70 updates are downloaded, start the download again and it should continue where it left off and download the remaining updates.