Hi
You could check out the Always On VPN feature:
https://learn.microsoft.com/en-us/windows-server/remote/remote-access/vpn/vpn-map-da
In this scenario, you cloud try these solutions on this link:
https://www.imab.dk/deploying-software-updates-via-vpn-cloud-management-gateway-and-microsoft-update-using-configuration-manager/
Please note: Information posted in the given link is hosted by a third party. Microsoft does not guarantee the accuracy and effectiveness of information.
I hope this information above can help you.
Please feel free to let us know if you need further assistance.