Why don't you run a disconnected WSUS Server in your disconnected network and transfer from the Online WSUS server to the Offline WSUS server? This will capture all the updates as if the system was online and allow you to use Windows as a Service (WaaS) to upgrade your systems.
Otherwise, you'll have to download the media creation tool on your online network, run it and tell it to make the ISO file, transfer that ISO file to your offline network, and upgrade each system that way.