I have LEM running in an air gaped segment. Many of the other products I have deployed there have the capability to do offline updating using removable media, (sneaker net) from an internet facing system. I would love to be able to utilize the threat feed capability of LEM in my non internet facing deployment.
