With Symantec firewall running on XP,
Install 6u10 JRE http://j2se.east/arc/1.6.0_10/nightly/2008-07-29/windows-i586/jre-6u10-windows-i586-p-iftw.exe
Open Control Panel
Run Java Control Panel
Click the Update tab
Click Update Now
Wait for Symantec Firewall Low Risk alert prompt to run jucheck. "Sun Microsystems Java Update Checker is attempting to access the Internet."

Expected:
Selecting "Permit Once" would be enough for jucheck.exe to determine that there is no update. Now realizing access needs to be permitted to the DNS server, maybe two accesses. The more accesses, the more users are likely to click "Block Always".

Actual:
Have to select "Permit Once" six, *6*, times before the dialog "You already have the latest Java(TM) Platform on this system." is displayed.

1. UDP Outbound 129.148.9.196 : 53 - (DNS Server)
2. UDP Outbound 129.148.9.196 : 53 - (DNS Server)
3. UDP Outbound 129.148.9.196 : 53 - (DNS Server)
4. TCP Outbound 72.5.124.55 : http (80) - Sun?
5. UDP Outbound 129.148.9.196 : 53 - (DNS Server)
6. TCP Outbound 96.7.38.34 : http (80) - Akamai?

Why so many requests to DNS? Why do both Sun and Akamai need to be queried?