how SEP clients get their updates in SEP.cloud

Greetings!
I'd like to get some clarifications concerning SEP.cloud product
1- it's obvious that sep clients get their updates from the internet but is there a way to assign a computer on LAN to uptade from.

2- how sep.cloud discovers the unprorected machines

3- can we deploy the management console to answer to the above but use the cloud for management?

Thanks.