Some customers will also implement a SEPM in the DMZ for this condition, and ask clients to switch to it with location switching. This allows tracking and management for remote clients. This is an advanced technique.
Hopefully the clients are set to use direct internet live update, so they continue to get def updates when they are remote?