Utilizing SUS without Server Internet Connectivity

Internet connectivity to a server can not and will not happen. SUS needs to
have connectivity to Microsoft's web site, this can not happen. This was also
the case with MBSA, however Microsoft has made available a file that can be
downloaded so the Baseline Security Analyzer can be used without connecting
to the internet. The file can be downloaded, copied to a memory stick and
placed the the MBSA directory.
Can SUS be utilized in the same way?
I have noticed a few entries asking this question, however there are no good
answers that could be used within our environment.
Is anyone aware of how this can be done? What specifically is SUS
downloading, where is this being downloaded from and where is it being
placed. How are the updates made available? Are they the same download format
as they are available from Microsofts download site? Is there a .cab
avaliable for these functions.
I am going to try and install SUS onto one of our servers tomorrow and try
and manipulate SUS to work in our environment, but if anyone could supply any
information or ideas I would appreciate it.
Thank You

Comments inline and at the end..

JJ8863 wrote:
> Internet connectivity to a server can not and will not happen. SUS
> needs to have connectivity to Microsoft's web site, this can not
> happen. This was also the case with MBSA, however Microsoft has made
> available a file that can be downloaded so the Baseline Security
> Analyzer can be used without connecting to the internet. The file can
> be downloaded, copied to a memory stick and placed the the MBSA
> directory.
> Can SUS be utilized in the same way?

Not that I know of. At least one server must have Internet Connectivity.
That's ONE server - not every machine on your network.

> I have noticed a few entries asking this question, however there are
> no good answers that could be used within our environment.
> Is anyone aware of how this can be done?

Well, no - not without knowing what about the other answers did not fit your
environment - what is your environment and why is the statement "Internet
connectivity to a server can not and will not happen.." true in your
environment?

> What specifically is SUS
> downloading, where is this being downloaded from and where is it being
> placed. How are the updates made available?

Wow - maybe you should read some before posting.
Below I have one page (Patch Management Using Microsoft Software Update) and
another you should look at:
http://www.microsoft.com/windowsserv...soverview.mspx
and
http://www.microsoft.com/windowsserv...s/default.mspx

SUS is downloading an update catalog based somewhat on parameters you give
it from Microsoft. The catalog is compared to what you already have then
the updates that you do not have are downloaded (again) from Microsoft. You
then, as administrator (depending on setup of the SUS server) choose what
updates of those it has available - you would like ACTUALLY available to
your clients - for whom you have (either through group policies or registry
values) set to get updates from your SUS server.

> Are they the same
> download format as they are available from Microsofts download site?

> Is there a .cab avaliable for these functions.
> I am going to try and install SUS onto one of our servers tomorrow
> and try and manipulate SUS to work in our environment, but if anyone
> could supply any information or ideas I would appreciate it.


Truthfully.. You need at least one machine that has internet connectivity in
order to utilize SUS.

Look through these for ideas..
http://myitforum.techtarget.com/arti...ew.asp?id=7586

Same person, different responders:
http://www.webservertalk.com/message286528.html

SUS Guidance page:
http://www.microsoft.com/technet/its.../pmsus252.mspx

--
<- Shenan ->
--
The information is provided "as is", it is suggested you research for
yourself before you take any advice - you are the one ultimately
responsible for your actions/problems/solutions. Know what you are
getting into before you jump in with both feet.