If you feel you're having connection issue, you can always set the LAN IP of the machine trying to patch as DMZ. This pretty much allows all connections on that IP to go through. While it's not suggested to leave it that way 24/7 unless you have other measures in place, it's worth using when attempting to patch if you encounter issues.
