Hi @Johno
We could assign software update points which are in untrusted domain child site system to the boundary group so that clients can find and use them.
If the response is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.