vSphere Update Manager | VMware
https://core.vmware.com/resource/vsphere-update-managerBy default, Update Manager will download VMware ESXi patches directly from VMware over the public Internet. For improved security, some environments do not allow Internet access from datacenter management components.In this demonstration, Update Manager does not have Internet access, so we will manually import the specific patches deemed necessary.