hi

you can be check this artical.

Symantec does not provide support for problems related to communication with clients that use VPN connections to check in with their parent server.

Symantec recommends that remote clients be allowed to run LiveUpdate themselves. If using Symantec AntiVirus Corporate Edition (SAVCE), a separate client group can be created for remote clients so that if they visit the main site, they can be managed without changing their configuration.

References
For information about Client Groups, read the document that applies to the product version being used:

• Creating and managing client groups in Symantec Client Security 3.0 and Symantec AntiVirus Corporate Edition 10.x
• Creating and managing client groups in Symantec System Center 6.0
• Creating and managing Client Groups in Symantec System Center 5.0

http://www.symantec.com/business/support/index?page=content&id=TECH100120&key=51852&actp=LIST