Hello @Klaus - Thank you for your post and I apologize for the delayed response!
The appliance server can be patched any time but if there are ongoing replications, the DRA agent will stop temporarily and then pick up from where it left after the patching is complete. After patching, you should confirm if the agents on the appliance are still running or not and none of the communication with Azure has broken.
Hope this answers your question!
---------------------------------------------------------------------------------------------------------------
If the response helped, do "Accept Answer" and up-vote it.