In the case of on-premise deployment, can the vulnerability database be placed within the internal network, so that outbound Internet connectivity is not required?
Partially.
The vulnerability database does indeed reside within the customer network. However, a connection to the Mend index is required, for database updates.