PGP Universal Server and offsite Drive Encryption clients
Currently, we have two clients using the latest release of Drive Encryption, controlled by our Universal Server which is also on the latest version. These laptops are typically always in the office apart from going home at night or occasional travel. This year we will be rolling out encryption to all of our laptops, around 30 total. A handful of these are rarely, if ever, in the office, and very rarely connect via VPN.
What is the best approach for these laptops? If at all possible, I'd like them to be in contact with a server instead of on their own. My server is an ESXi VM, so I can create a DMZ-only Universal Server if needed.