Yes, look at using the NetSUS appliance from JAMF, or Reposado, which the NetSUS appliance uses as the Software Update server piece. In either case, you can specify that the clients will pull the actual updates from Apple's SUS servers, but you can still control what updates are available to clients, so kind of a best of both hybrid between running an in house SUS and just letting everyone pull updates from Apple.
You can find the latest Net SUS information here:
https://jamfnation.jamfsoftware.com/discussion.html?id=8097
