I am looking after three sites. Two are nice and close and share a high-speed link, so there is a single WSUS server to manage those - no problems there.
The other site is 4 servers in China, using an ipsec VPN; this is not so great for patch downloads.
Is there any way to setup WSUS so that I can approve patches for the Chinese servers through WSUS, but have them download the patches from Microsoft's servers? I don't want to setup a dedicated WSUS in China for 4 servers, that is too much additional management overhead for such a small site.