Location awareness will help you.
You can use the documents mentioned above. The location conditions should be in IP range,
1. if it is a private IP inside the network - the update can happen via SEPM
2, If the IP is public - the update can happen via internet.
two different LU policies for different locations. This will help you.