I have inherited a SEP environment that I administer but am having a problem understading how remote clients off our network are getting updated. The way it works currently, if a client is on our network the "Live Update" feature on the client itself is grayed out and not available. Those would get updated via SEPM. When the client is off our network "Live Update" is available and if you give it some time will get the latest definitions automatically.
Looking at the "Live Update" policy on SEPM shows that both the "Use default management server" and "Use a LiveUpdate server : Use the default Symantec LiveUpdate server" are both selected. Is this the mechanism of how this works or am I not understanding it correctly?
This pertains to laptop users who work from home.
Also to note, our laptop users do have Direct Access configured but also a VPN solution as not everything works via Direct Access. Most remote users do not actively use the VPN solution since their needs rarely require it.