You need to create the package using the Installation Designer Product.
This can then be deployed by whatever deployment tool you use to deliver software.
You can also use this to configure the package with custom policies etc.. to ensure correct function straight from install & until you reconnect with the ePO server.
As to the Update does the device have connectivity to the internet ? If so just point it to the McAfee sites as a fallback repository.