There are a number of reasons for Node Manager services to require internet access. These include Map Charts, Mods OCSP validation, Python services, etc.
Configuring of each service to have proxy access if difficult, especially as they are all configured differently.
How about configuring the Spotfire application server(s) to provide internet access (with or without proxy) to their Node Manager services. This should allow zero configuration of the services, but allow the Spotfire server to act as a form of proxy (relay) with its own security if required.