It is easiest to install ARR using the IIS WebPI -- this requires Internet access to https://go.microsoft.com (port 443 + possibly port 80).
If IIS WebPI is not available, see "Installing ARR manually without WebPI" note that for Windows Server 2016 this will requires some registry tricks to back-down the version of IIS--the individual components think that IIS Version 10 is lower than 8.0!
