Patching Machines that come in and out of our network.

We have a large number of laptop users. They are based in our HQ and branch office which are connected via VPN(we don't use a distro server, all our patched from our main ofc) in both locations they take their laptops home nights, weekends, etc.

One of my sys admins did some experimenting and was unable to get remote AND local patching to work correctly at the same time.

If the LAN agent is installed the endpoint patches fine while in the office, and of course doesn't when its not.

When he configured the WAN agent the endpoint patched fine while out of the office, but when it came in the office he said it would not patch correctly.

(I'm assuming you install one or the other agent)

So we're wondering what exactly is the correct way to configured desktop central to travel a mobile user. A user who is back and forth between being on the LAN and working remotely regularly.