We want to patch machines that are not on the network but are connected to their wireless at home. This will help with patching compliance. However, I'm told this can only be done by having our internal SMA public facing. This isn't best practice and we'd to have it point to our proxy in our DMZ. I was told this setup isn't currently supported.