WSUS – Windows Server Update Services

A server role & can manage windows updte in your domain.

Pull patches to WSUS using below one,
Internet
Upstream server(another WSUS server)
Copy file to WSUS server