Please can someone clarify if it is possible to push a new OS image to a device that is NOT on the same network as the Endpoint Central server.  The scenario could be that I have a home worker with a device with the EC agent installed and I need to replace the operating system on the device because it has a virus or requires a version upgrade. 

If this is possible please outline the requirements for doing this.  i.e I would need need to move to the Cloud edition of Endpoint Central etc etc....