Specific Firewall rules for apple services

Hi,

This is a bit of a strange one, but hoping someone might have a good idea or have found a solution to this before.

We have a lot of apple devices on our network but want to allow software updates (discover, download and install), iMessage and FaceTime services over our network without flooding the WAN link. The reason for this is because we have a small external pipe that we can use and have a lot of other systems using this link.

I have checked the Firewall ports article but isn’t very specific in terms of just doing these services and nothing else.

Does anyone know what the firewall rules are for this and how much they use in terms of bandwidth?

Thanks you in advance!