Help with design

[yaruslavm]

Hello

 

i am in need of help about design that involves sccm 2012 and wsus

 

There are 3 environment , each has a different domain

one environment is open to the internet and the other 2 are not ( lets name it open env )

second environment can talk to other environment's without any problem ( lets name it main env ) - SCCM 2012 is installed here

third environment is a developers env and it can talk only with the "MAIN" env. ( no acces to the open env)

 

what i would like to do is to manage all windows updates on all those environments with single sccm site

so i was thinking about 2 ways :

 

WAY # 1

• wsus + site server on the open env
• wsus + sup on main env that syncs from wsus on open env
• for dev env install a local dp and let it connect to sup on main env?

if i use this method can i use seperate database's ? or should i let both wsus servers use same database on same sql?

 

WAY #2 - tell me if this is possible

• wsus + site server on the open env ( WSUS DB will be on sql that is in main env)
• install sup on main env and let is controll the wsus on open env( possible? )
• dev env clients will sync data from wsus database, and install with local distribution point

if the database is on env that can be accesed by both other env is this the only thing i need or the clients from dev env will try to get something from the wsus srv that is in open env ?

 

i hope i made myself clear if not please let me know.