Without direct internet connectivity, you would need to either:
- Proxy the internet access via another device (ie Squid Proxy or Firewall) so it has internet access via another device.
Or stand up a local server for patching (download and approve patches to these services, then push it out):
- ie WSUS server (for Windows)
- or Sattelite server (or equvilient Linux patching).