How to manage internet-client

Hi all,

i would like to manage my endpoints when they are over internet.

I've already set up a live update's policy for outside network that allow the clients to download the definitions from symantec's server.

Is there a way to allow clients to download new policies (for example blacklisted files) from the SEPM when they aren't into LAN? Such a "gateway" or similar. 

I prefer, if it's possible, not to publish my SEPM server on internet.

Version 14.0 RU1 MP2

Thanks

Mattia