Is there a way to prevent clients from receiving Patch and Software updates while off-site using VPN with thier laptops?