Need help setting up proxy, or something :)

I have a secure environment that gets it's suse patches from a spacewalk box with a local repo in another secure network. This environment also has a number of boxes out in the field that connect to the secure environment via https. The majority of these field boxes are able to connect to the opensuse repositories to update themselves, however, one of my field boxes has stringent security requirements that doesn't allow the connection to the opensuse repositories.
I'm thinking that I'd like to point the field box to a proxy server in my secure environment, which then points the update requests to the spacewalk repo. Is this a good idea? Is there a better idea out there? Thanks for any feedback.