Hello Halil,
If applications are moved to the app host, docker containers run on the app host. All apps if needed to connect with the internet, directly connect from the App host.
So you need to allow access to update.xforce-security.com and license.xforce-security.com from the app host. it will not reach via console.
Also if you have applications that are going to communicate with external APIs, you will need to provide allow access to those sites from the app host as well.
------------------------------
Vishal Tangadkar
------------------------------