See http://www.ibm.com/support/knowledgecenter/SS2TKN_9.5.0/com.ibm.bigfix.doc/Platform/Action/c_dynamic_downloading.html for dynamic downloads information. There is a whitelist.txt which resides on the BigFix server, you’ll need to add security.ubuntu.com to the whitelist.