WSUS can be installed on a separate port/site.
The new WSUS kicks major butt and meets most needs for patch management I think... GUI, Logging, BITS, infrastructure, grouping etc etc.. everything's changed in it for the better.
_________________________
The tart is out there
