the appserver is the only thing that should be downloading the files from shavlik.
you have a couple options:
grant the appserver internet access, possibly through an http proxy.
copy the urls (from CM GUI | Tools | Patch Analysis Config ) and download them from somewhere else. put them on an nsh-accessible path that the appserver can get to - even itself - like //server/tmp/.. then change the urls in the patch analysis config to match the nsh paths.
you'll have to periodically download the files if you do the 2nd method.
Thanks for the reply Bill. I'm guessing that your second suggestion will be the way we go.
ah, sneakernet :)
When I edit the Patch Analysis Configuration File, there is a check for updates checkbox that is selected.
Should I uncheck that?
a config file or the setting in the GUI 'Tools | Patch Analysis Configuration' ?
if it's the later, leave it on, and it will check the nsh path you are changing the URL to so when you copy down new files it will look there.