Eduardo,
Please do a check for the CCMExec service to see if it is running first, if not then force it start. You should then allow access to the SMS servers so they can remediate themselves.
That should get the client to point to their internal patch management servers in order to grab the latest updates.
Thanks,
Tarik Admani
*Please rate helpful posts*