Ask HN: Company wants to isolate corporate network from the Internet

Corporate is nervous about cyber attacks and has asked about isolating the corporate network from the Internet and use VM's for webmail and browsing. Updates can be done offline. Is this doable or just ridiculous?