How to remotely patch an air-gapped network without USB drives
Air-gapped and offline systems prohibit USB drives and lack direct internet access, forcing administrators to manually transfer third-party patches using alternate media like DVDs. Because push-based deployment tools fail when a machine drops off the network, administrators cannot reliably update isolated servers from afar.
What people tried
Every workaround mentioned in the threads below. We haven’t tested any of them — and nobody here is claiming they worked.
- 1Download patches on an internet-connected computer, copy the files over the local network to the server, and install them manually.
- 2Use WSUS offline to preload patches on a build and copy the batch over to the host.
- 3Using WSUS and Batchpatch along with manual DVD transfers for third-party patches
- 4Setting up heartbeat schedules and inventory collections in push-based tools
- 5Using agent-based solutions with download scripts on an internet-connected side
In their words
Unedited, grouped by where they were said, most upvoted first within each place, each linked to the thread it came from.
“We aren’t allowed to use USB , and we want to do it remotely”source ↗
“Our network is air gapped and I use an internet connected machine (in a separate network) to get the 3rd party patches and transfer them over using DVDs.”source ↗
“The deciding factor from your other thread is the machines that drop off the network for weeks. BatchPatch and PDQ Deploy are push-based, so a box that's offline when the job runs just misses it.”source ↗
“we do **not** want to use USB drives or external hard disks.”source ↗
Where this came up
People with this problem also raised
- 2Why do remote support tools keep giving generic error messages?
- 4Forgot how to wire a part after taking it off
- 2How do I take over home tech and cameras when my partner is gone?
- 4How do I reconnect a disconnected HVAC duct?
- 2How to update BIOS and firmware remotely across mixed device fleets
- 8How to choose between N-able and Action1 for patching and remote support