How we can get and install offline signature updates?

You can do it by downloading the updates to a second unit and use that for local update point.

On the local Penetrator you can then set the update point for the second unit so it will update locally only.