Hi all,
Personally I use WSUS, it's more convenient than offline scan or zip packs. There is almost all updates unlike offline scan which doesn't contain IE8 for example. And for those who are missing there is only to import them. It's work very well