NPM running 10.3, doesn't recognize new updates

So, I am an infrastructure guy, never touched a server, and am extremely new to Orion products - but willing to learn.

Problem:  My server isn't recognizing new product updates.

I noticed that NPM is on 10.6 now; however we are running 10.3.  Attached are print screens of the pages.  Our firewall is extremely locked down.

So my question:

Do you have to buy the new license for the new updates?

Or

Would NPM require a firewall exemption to receive updates?  If so, what ports are used and where does it go?