> Hi Cliff,
>
> Yes you can, apparently.
>
> I found the following info on page 14 of the attached document. Page 75
> tells you how. Good luck!
>
> Networks Disconnected from the Internet
> It is unnecessary for your entire network to be connected to the Internet in
> order for you to deploy WSUS. If you have a network segment that is not
> connected to the Internet, consider deploying WSUS as shown in the
> "Distributing Updates on an Isolated Segment" illustration below. In this
> example, you create a WSUS server that is connected to the Internet but
> isolated from the intranet. After you download updates to this server, you
> can hand-carry media to disconnected servers running WSUS, by exporting and
> importing updates.
> Distributing Updates on an Isolated Segment
>
>
> Exporting and importing is also appropriate for organizations that have
> high-cost or low-bandwidth links to the Internet. Even with all the
> bandwidth-saving options described later in this guide downloading enough
> updates for all Microsoft products throughout an organization can be
> bandwidth-intensive. Importing and exporting updates enables organizations
> to download updates once and distribute by using inexpensive media. See Set
> Up a Disconnected Network (Import and Export Updates) for more information
> about how to export and import updates.
>
>
> --
> Take care,
>
> David
>
http://dcraige27.blogspot.com>
> "Cliff Hobbs" <Cliff Hobbs[ at ]discussions.microsoft.com> wrote in message
> news:7EDF39A6-3177-40AC-ADBA-F2198B1C6FAF[ at ]microsoft.com...
> > Hi all,
> >
> > apologies if this has been asked before. We have a customer who has a
> > completely disconnected site of about 30 machines who need to manage their
> > security updates.
> >
> > One suggestion is to install a local WSUS server on this site. The problem
> > is how do we get the updates onto this server in order to deploy them? It
> > seems we'd either need to give this server Internet connectivity in order
> > to
> > download the updates from MS (which isn't an option) OR install another
> > WSUS
> > server somewhere that does have Internet access, download the updates on
> > here
> > and then copy them across to the isolated WSUS server.
> >
> > Do we REALLY need to install two WSUS servers to get this to work? Does MS
> > not have a WSUS server somewhere from where you can download the updates
> > direct (I'm guessing fears of content tampering wouldn't be an issue as
> > the
> > content is digitally signed so if someone tries to change an update WSUS
> > will
> > whinge or am I misinformed)?
> >
> > Any thoughts or comments much appreciated.
> >
> > Kind regards,
> > Cliff
>