Make all of the clients managed per this KBA
http://www.symantec.com/docs/HOWTO55039
Than you can use location awareness so when clients go off the network, they can get updates from a Symantec LiveUpdate server. When they're on the network, they can get their updates from the SEPM. You will than be able to get logs from the clients and accomplish what you need for alerts.