@pasha-mayerov
Thank you for posting in Microsoft Q&A forum.
According to below article, you can see what IP it was trying to connect to for the sync. You can then open that connection through you firewalls.
(Third-party link, just for your reference)
https://www.sccmtst.com/2018/01/troubleshooting-wsus-sync-issues.html
If the response is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.