Thank you for your response, worked like a charm.
I will of course leave the update notifications enabled on machines here which actually do have internet access, however, until now, starting Visual Studio always resulted in a few ugly lines in the firewall logs 😉
