Why don't you run a disconnected WSUS Server in your disconnected network and transfer from the Online WSUS server to the Offline WSUS server? This will capture all the updates as if the system was online and allow you to use Windows as a Service (WaaS) to upgrade your systems.