Patch Management Solution

Our organization is spread out over about 30 locations with lots of remote users and multiple domains.

Is there a way to set the patch remediation policy so it DOES NOT download to our central server but uses the vendor or symantec's servers as sources?  Like in WSUS where you can choose not to store the updates locally?

Thank you for any advice.

I don't think so, no.

You should set up site servers on your remote sites so the updates are only downloaded once to each site (these can be workstations on small sites) and set up Cloud Enabled Management (CEM) so your remote users can get the updates over the internet from your servers.

Multiple domains shouldn't be an issue as all the connections can be over HTTP.