Manage PC's not connected to WAN

How to we manage ESET on our laptop and PC's not connected to our WAN?

Do I open the ESET management ports i.e. 2221-2224 on our perimeter firewall and set the remote administration on the client to our public IP address?

Looking to be able to monitor threats, policy and ensuring clients are up to date when not on the WAN.

 

Some of our laptops and remote sites connect in through our VPN. When the VPN connection is established from time-to-time the data trickles in to ERAS. I also have dual update profiles setup, that attempts to download via LAN (VPN) if available, if not updates are pulled via the Internet, since we never know for sure if a remote user has the VPN connected or not.

As for your question, I'm sure you can open the ports in your Firewall and point the laptops to your external IP. It won't be as secure as using a VPN connection though.