We currently have a WSUS server running in our primary office. Our branch offices currently connect to the primary over our WAN to download updates. This is obviously not ideal as each PC is connecting over the WAN and downloading multiple copies.
We are now putting a small server in each of the branch offices. We are able to setup the branch office to be a downstream WSUS server receiving updates from our primary server, which means we only push out the updates once which is good.
What would be even better for us is if we can have our upstream server in our primary office where we manage everything (e.g. approve updates) which push out to our downstream servers, but then our downstream servers download their own copy of the update directly from Microsoft. This would free up some more of our limited bandwidth in the primary site.
Is this possible? Does Microsoft have a guide on how to set this up?