Antivirus installation and signature update to isolated servers


We have some servers in an isolated network,

We looking for an option to deliver updates, signatures and receive back status from end-point installed on a server to the Sophos Central,

What could be a solution to achieve this? Some kind middle proxy server needed? If yes, please guide to the manual.