After opening up port 2301 on the installation updates were able to be downloaded, port 2301 was not open on the other VCRM instance.
I can see how SUM would have advantages in a single domain environment on a LAN , but we have multiple forests across multiple sites, and it easier to make VCRM accessible to each site than it would be to make each site accessible from a single location.